Reputation
35,335
Next tag badge:
90/100 score
20/20 answers
Badges
5 58 137
Impact
~2.2m people reached

Mar
24
comment What is the HTTP “Server” response-header field used for?
@Ced stack exchange has a lot of problems, did you load this page over HTTP? With a session? Hmm...
Mar
1
comment Why are passwords limited to 16 characters?
@Falco a secure message digest function will ensure that the resulting hash is a consent length, SHA-512 will always produce 512 bits.
Oct
9
comment Anti-CSRF mechanism with referer header
@pllee the PHP snip does not call exit() if the http_referer is absent. Although the referer cannot be changed, it is trivial to omit using a meta referer policy.
Oct
3
comment External cross domain include script
@jcalfee314 unfortunately some assessments are conducted analysts who are blindly reporting BURP scanner findings XD. Context is important, and CDNs are fundamental requirement for scalable webapps. CDNs aren't perfect, and i recently hacked a major Akamai product...
Sep
22
comment Why no support for TCP Sockets in JavaScript
Consider researching the same-origin policy. Voting to close.
Sep
21
comment Security of faxes vs emails
Every facsimile machine needs to die in a fire. One big joyus fire, so that humanity can move on.
Sep
7
comment Is it possible to Exploit this Line Feed?
Could you provide a link to explain %E5%98%8D%E5%98%8A?
Sep
7
comment Is it possible to Exploit this Line Feed?
An attacker shouldn't need two content-types to exploit this issue. In fact, this may confuse the browser. Controlling the header and the beginning of the HTML should be sufficient to control the content of the entire page. I have no idea what micro is referring to about "%E5%98%8A%E5%98%8D", that must be chinese (literally).
Sep
7
comment Is it possible to Exploit this Line Feed?
So what the hell is "%E5%98%8D%E5%98%8A", could you link to some background information on this extremely obscure attack string? My guess is this is some kind of advanced multi-byte injection, care to elaborate? (hackerone.com/reports/52042)
Aug
19
comment Crossdomain.xml vulnerabilities
@Michal Koczwara Without a shadow of a doubt. 100% textbook issue right here, all sources will confirm that the SOP has been intentionally disabled. It really doesn't get clearer than this.
Aug
4
comment Do ISP Detect and Block Pen Testing Tools?
Consider changing the title.
Aug
2
comment Oracle Sql Injection Reverse Shell
Shells outside of the MS-SQL world often require some form of creativity. Perhaps you should do your own research, and explore the database before asking such questions.
Aug
1
comment Can this text be figured out?
Asymmetric or symmetric?
Aug
1
comment Brute force attack
Consider renaming your post to "Common Security Vulnerability"
Jul
30
comment OAuth access token vs session key
CSRF is not a method of authentication, it is an attack. Consdier reading the OWASP top 10, espically the parts on session managment: (owasp.org/index.php/Session_Management_Cheat_Sheet).
Jul
28
comment How can I defend against malicious GET requests?
What attack are you worried about here? Could you provide more details, I just see a routing table. I think most attackers are more interested in code exec and info disclosure than DoS.
Jul
27
comment Can client-side hashing improve after-the-fact security in response to password leaks?
@Veedrac Google may not use this method for HTTP authentication because the security gain is only in edge cases, and it is fairly complex to do correctly. Zero password proofs are useful, but two-factor authentication protects against a much broader category of attacks. Google Authenticator is a cool service.
Jul
24
comment Using .apk files to reverse_tcp and exploit on android?
I have no idea what you are asking. Consider reading about common mobile vulenrablites: owasp.org/index.php/Projects/…
Jul
21
comment .JPEG File upload shell via EXIF comments
@lynks If the script is dropped into the webroot, then the attacker wouldn't need the include(), it can be executed directly. +1 sounds legit.
Jul
8
comment Creating a P2P hosted website
@Jeremy French Yes, the website is free to run JavaScript and use localstorage. A server-side web application would require Tor.