28,037 reputation
23197
bio website bishopfox.com
location
age
visits member for 3 years, 6 months
seen Jul 10 at 22:25

Do not trust any security related answers you see on StackOverflow/Security.StackExchange. Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is almost never chosen.

Test everything, trust no one.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


Jan
27
answered Possible ways of exploiting PHP register_globals
Jan
26
revised Escaping rich text editor output
added 34 characters in body
Jan
25
answered Escaping rich text editor output
Jan
23
comment Can isolated forms be dangerous for my server security?
Read the OWASP top 10.
Jan
21
comment What kind of virus attack is this? And what do I do now?
You have provided no useful information, all anyone can tell you is that the "the attack" resulted in remote code execution. Probably started from timthumb or just neglecting basic security practices like UPDATES, and now your website is backdoored all to hell and re-sold on the blackmarket. Enjoy!
Jan
20
awarded  web-browser
Jan
16
revised Valid Characters For Magnetic stripe
deleted 16 characters in body
Jan
16
comment Valid Characters For Magnetic stripe
@PsychoData I stand by my answer, bits can be cast as any datatype. Without the OP providing his use, then the general case fits best.
Jan
16
answered Valid Characters For Magnetic stripe
Jan
7
awarded  Yearling
Jan
4
awarded  Notable Question
Dec
31
answered Missing Secure Attribute in Encrypted Session (SSL) Cookie Recheck
Dec
31
comment Identify users accessing hidden link in a website
@TestRunner i don't think you have provided enough information to assess that. But you are probably being attacked right now, like everyone else.
Dec
30
revised Cross site Scripting in HTTP Method?
added 3 characters in body
Dec
30
revised Cross site Scripting in HTTP Method?
added 10 characters in body
Dec
30
revised Identify users accessing hidden link in a website
added 1 characters in body
Dec
30
revised Cross site Scripting in HTTP Method?
added 218 characters in body
Dec
30
answered Cross site Scripting in HTTP Method?
Dec
30
answered Identify users accessing hidden link in a website
Dec
30
comment Are cross site scripting attacks and sql injection a good topic for my thesis?
This is a poor choice for a thesis topic because these attacks are so well understood and it is a difficult topic to expand upon. I would find a less popular topic.