32,358 reputation
447118
bio website bishopfox.com
location
age
visits member for 4 years, 4 months
seen 14 hours ago

Test everything, trust no one.

Do not trust any security related answers you see on StackOverflow.com (SO) / Security.StackExchange.com (SE). Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is not always chosen.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


Feb
16
revised Would an unnecessarily long password degrade performance of a WPA2 wireless network?
added 1 character in body
Feb
12
comment SAML Without Session
This question needs more information. I think what you are suggesting is horribly insecure and should not be done. The client cannot be trusted.
Feb
11
awarded  Enlightened
Feb
11
awarded  Nice Answer
Feb
11
revised What is the HTTP “Server” response-header field used for?
added 1 character in body
Feb
9
comment Content management url security
@SexyMF cloudflare blocks bots from exploiting the DoS vulnerability that has been introduced to wordpress instance. It 100% solves the symptoms of your weakness, but not the underlying problem. The DoS vulnerability should be completely and totally addressed by the first bullet point.
Feb
9
revised penetration testing first step
added 65 characters in body
Feb
8
revised penetration testing first step
added 109 characters in body
Feb
8
revised penetration testing first step
added 166 characters in body
Feb
8
comment penetration testing first step
@malloc try attacking something, like damn vulnerable web app. Then come back with a more specific question.
Feb
8
revised Content management url security
deleted 18 characters in body
Feb
8
answered Content management url security
Feb
8
revised penetration testing first step
added 135 characters in body
Feb
8
answered penetration testing first step
Feb
7
comment Is there a way to bypass the inbuilt php functions for sqlinjection
input sanitation routines are misused regularly.
Feb
4
comment Encrypted access tokens - expiration date
You may want to consider changing the title. You are proposing using a cryptographic hash SHA-256, which is not an encryption algorithm.
Feb
4
comment XSS outside of the DOM
@winhowes xss can always be avoided.
Feb
4
answered XSS outside of the DOM
Feb
3
revised How does xss work with web applications that take payload not through url
added 64 characters in body
Feb
3
comment How does xss work with web applications that take payload not through url
@DoodleKana the attacker copy pastes the HTML and JavaScript in the above answer, and then gets a victim to click on a URL that loads that exploit. method=POST