Reputation
34,600
Next tag badge:
86/100 score
20/20 answers
Badges
5 55 135
Newest
 Nice Answer
Impact
~2.0m people reached

Jan
19
comment Brute force login attempt from spoofed IP's
@Mark Maunder Putting the burden on the users in the form of a configuration option is still a vulnerability. The REMOTE_ADDR is the only value taken from the socket and there for cannot be spoofed. The other values may contain valid information, but this is highly unlikely. You could have an option to take all of these sources of IP address and BLOCK THEM ALL, but this can create a problem where the attacker can intentionally block the administrator if the attacker knew this ip address. Ignoring the REMOTE_ADDR is always the wrong option.
Jan
18
comment HTTP Response Splitting
+1, although if someone tried to follow these steps it wouldn't work because the content length is incorrect and the browser will error out! You are leaving out a required step of the exploitation process.
Jan
16
comment Safely transfer UserID among different Subdomains
@AJ Henderson a subdomain can initiate an oAuth 2-leg request. If you don't know why, you need to read about oAuth, i don't know why you would suggest anything else.
Jan
16
answered Safely transfer UserID among different Subdomains
Jan
16
comment Breaking out of attribute in double quotes
@er4z0r use a whitelist approach, a blacklist will always fail. You cannot possibly know every bullshit URI, I could just come up with one right now on my own machine.
Jan
15
comment How do you build a secure web application that is also COPPA compliant?
David Stratton ,That is probably the best answer and probably what I’m going to recommend.
Jan
15
reviewed Approve How do you build a secure web application that is also COPPA compliant?
Jan
15
comment How do you build a secure web application that is also COPPA compliant?
What if the school is using the software, and automatically registers every child.
Jan
15
revised How do you build a secure web application that is also COPPA compliant?
added 122 characters in body
Jan
15
answered Breaking out of attribute in double quotes
Jan
15
asked How do you build a secure web application that is also COPPA compliant?
Jan
14
revised Brute force login attempt from spoofed IP's
added 100 characters in body
Jan
14
comment Brute force login attempt from spoofed IP's
@Null this flaw completely bypasses the security system they are trying to implement... but in the grand scale i agree its not critical. However, this is an inexcusable mistake for a security professional to make, I would expect that they have made even more egregious mistakes.
Jan
14
comment Brute force login attempt from spoofed IP's
@Cristian Dobre you could try setting your x-forwarded-for http header and see if the application changes behavior. Related: blog.ircmaxell.com/2012/11/anatomy-of-attack-how-i-hacked.html
Jan
14
answered Brute force login attempt from spoofed IP's
Jan
13
awarded  Nice Question
Jan
13
revised UNION SQL Injection
added 157 characters in body
Jan
13
answered UNION SQL Injection
Jan
11
comment What are some of the worst DBMS for finical software, and why?
+1 Perfect, this question is about developers accidentally introducing flaws due to unexpected database behavior.
Jan
11
revised What are some of the worst DBMS for finical software, and why?
added 11 characters in body