Reputation
35,330
Next tag badge:
90/100 score
20/20 answers
Badges
5 58 137
Impact
~2.2m people reached

Jan
22
comment Breaking out of attribute in double quotes
@er4z0r you should read "a tangled web" and close this question.
Jan
21
revised Comparsion Between AppArmor and Selinux
deleted 2 characters in body
Jan
21
comment Is TLS secure when full eavesdropping on the network occurs?
SSL/TLS would be pretty useless if it didn't prevent this attack.
Jan
20
answered Comparsion Between AppArmor and Selinux
Jan
19
revised Brute force login attempt from spoofed IP's
added 43 characters in body
Jan
19
comment Brute force login attempt from spoofed IP's
@Mark Maunder Putting the burden on the users in the form of a configuration option is still a vulnerability. The REMOTE_ADDR is the only value taken from the socket and there for cannot be spoofed. The other values may contain valid information, but this is highly unlikely. You could have an option to take all of these sources of IP address and BLOCK THEM ALL, but this can create a problem where the attacker can intentionally block the administrator if the attacker knew this ip address. Ignoring the REMOTE_ADDR is always the wrong option.
Jan
18
comment HTTP Response Splitting
+1, although if someone tried to follow these steps it wouldn't work because the content length is incorrect and the browser will error out! You are leaving out a required step of the exploitation process.
Jan
16
comment Safely transfer UserID among different Subdomains
@AJ Henderson a subdomain can initiate an oAuth 2-leg request. If you don't know why, you need to read about oAuth, i don't know why you would suggest anything else.
Jan
16
answered Safely transfer UserID among different Subdomains
Jan
16
comment Breaking out of attribute in double quotes
@er4z0r use a whitelist approach, a blacklist will always fail. You cannot possibly know every bullshit URI, I could just come up with one right now on my own machine.
Jan
15
comment How do you build a secure web application that is also COPPA compliant?
David Stratton ,That is probably the best answer and probably what I’m going to recommend.
Jan
15
reviewed Approve How do you build a secure web application that is also COPPA compliant?
Jan
15
comment How do you build a secure web application that is also COPPA compliant?
What if the school is using the software, and automatically registers every child.
Jan
15
revised How do you build a secure web application that is also COPPA compliant?
added 122 characters in body
Jan
15
answered Breaking out of attribute in double quotes
Jan
15
asked How do you build a secure web application that is also COPPA compliant?
Jan
14
revised Brute force login attempt from spoofed IP's
added 100 characters in body
Jan
14
comment Brute force login attempt from spoofed IP's
@Null this flaw completely bypasses the security system they are trying to implement... but in the grand scale i agree its not critical. However, this is an inexcusable mistake for a security professional to make, I would expect that they have made even more egregious mistakes.
Jan
14
comment Brute force login attempt from spoofed IP's
@Cristian Dobre you could try setting your x-forwarded-for http header and see if the application changes behavior. Related: blog.ircmaxell.com/2012/11/anatomy-of-attack-how-i-hacked.html
Jan
14
answered Brute force login attempt from spoofed IP's