32,554 reputation
449120
bio website bishopfox.com
location
age
visits member for 4 years, 6 months
seen 15 hours ago

Test everything, trust no one.

Do not trust any security related answers you see on StackOverflow.com (SO) / Security.StackExchange.com (SE). Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is not always chosen.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


Feb
8
revised Content management url security
deleted 18 characters in body
Feb
8
answered Content management url security
Feb
8
revised penetration testing first step
added 135 characters in body
Feb
8
answered penetration testing first step
Feb
7
comment Is there a way to bypass the inbuilt php functions for sqlinjection
input sanitation routines are misused regularly.
Feb
4
comment Encrypted access tokens - expiration date
You may want to consider changing the title. You are proposing using a cryptographic hash SHA-256, which is not an encryption algorithm.
Feb
4
comment XSS outside of the DOM
@winhowes xss can always be avoided.
Feb
4
answered XSS outside of the DOM
Feb
3
revised How does xss work with web applications that take payload not through url
added 64 characters in body
Feb
3
comment How does xss work with web applications that take payload not through url
@DoodleKana the attacker copy pastes the HTML and JavaScript in the above answer, and then gets a victim to click on a URL that loads that exploit. method=POST
Feb
3
answered How does xss work with web applications that take payload not through url
Jan
20
answered How to communicate securely
Jan
20
comment Vulnerable XSS Test
What about xssed.com?
Jan
19
comment Are open redirects a security concern?
@Pacerier URL shorteners are sometimes used in phishing attacks, but having a URL like paypal.com or chase.com would be more valuable.
Jan
19
comment why application/json content type have csrf token?
crossdomain.xml can only undermine CSRF protections. I don't think checking the content-type is a valid from of CSRF prevention.
Jan
19
comment What are HSTS Super Cookies?
HSTS has nothing to do with cookies. Do you have a source?
Jan
18
comment Kaminsky Bug DNS Cache Poisoning
Old DNS bug is old.
Jan
12
revised Acquiring remote forensic image from EC2 instance
added 42 characters in body
Jan
12
answered Acquiring remote forensic image from EC2 instance
Jan
12
comment Run a uploaded file with a double extension?
The "double-extension" attack works against Apache when the first extension isn't listed in the /etc/mime.types file, then it will fallback on the 2nd extension. Voting to close.