30,044 reputation
336107
bio website bishopfox.com
location
age
visits member for 3 years, 10 months
seen 2 hours ago

Test everything, trust no one.

Do not trust any security related answers you see on StackOverflow.com (SO) / Security.StackExchange.com (SE). Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is not always chosen.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


Oct
19
answered Security concerns with iframes
Oct
19
comment How is the same origin policy causing my PoC to fail when I don't need to read return data?
@SilverlightFox I'm sorry, but it just doesn't work that way. Prove me wrong, show me a CSRF exploit that you have written that uses an XHR. (This is an impossible task for a modern browser.) If the target has CORS enabled, the the web app has bigger problems than CSRF.
Oct
19
comment How is the same origin policy causing my PoC to fail when I don't need to read return data?
@SilverlightFox I should reiterate, XHR can never be used in a CSRF attack because the CORS pre-flight request prevents this attack.
Oct
19
comment Socket.IO Client Security
@mtdevens I think that this: websocket.org/aboutwebsocket.html disagrees... I am pretty sure you need CORS to have a cross-origin WebSocket. Do you have any references?
Oct
18
revised Socket.IO Client Security
added 397 characters in body
Oct
18
revised Socket.IO Client Security
added 20 characters in body
Oct
18
revised Socket.IO Client Security
added 20 characters in body
Oct
18
comment Socket.IO Client Security
@jfriend00 updated.
Oct
18
revised Socket.IO Client Security
deleted 7 characters in body
Oct
18
comment Socket.IO Client Security
This post is confusing because the Same Origin Policy (SOP) is never mentioned. The last paragraph is a violation of the SOP.
Oct
18
answered Socket.IO Client Security
Oct
18
awarded  Enlightened
Oct
18
awarded  Nice Answer
Oct
18
revised Is it any more secure to use a HTML form instead of a javascript popup?
deleted 145 characters in body
Oct
18
revised Is it any more secure to use a HTML form instead of a javascript popup?
added 130 characters in body
Oct
18
answered Hardware token to authenticate web application
Oct
18
revised Is it any more secure to use a HTML form instead of a javascript popup?
added 28 characters in body
Oct
18
revised Is it any more secure to use a HTML form instead of a javascript popup?
deleted 7 characters in body
Oct
18
answered Is it any more secure to use a HTML form instead of a javascript popup?
Oct
17
comment Reversing an entry card - How to find out what type of RFID hardware I need to read the chip?
@domen If you aren't using a NIST approved algorithm then the protocol is already broken. If you search for "DESfire proxmark" I'm sure you will find more than one exploit.