32,757 reputation
449122
bio website bishopfox.com
location
age
visits member for 4 years, 6 months
seen 49 mins ago

Test everything, trust no one.

Do not trust any security related answers you see on StackOverflow.com (SO) / Security.StackExchange.com (SE). Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is not always chosen.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


10h
comment what reconnaissance or foot-printing tools for network or web, do you recommend?
subbrute: github.com/TheRook/subbrute
1d
comment Can client-side hashing improve after-the-fact security in response to password leaks?
@Veedrac Google may not use this method for HTTP authentication because the security gain is only in edge cases, and it is fairly complex to do correctly. Zero password proofs are useful, but two-factor authentication protects against a much broader category of attacks. Google Authenticator is a cool service.
1d
comment Is there a way to hack passwords in kali linux without wordlist
When I was 18 I was dropping RCE 0-days. Age Isn't an excuse for not understating web application security or how to write code.
Jul
24
comment Using .apk files to reverse_tcp and exploit on android?
I have no idea what you are asking. Consider reading about common mobile vulenrablites: owasp.org/index.php/Projects/…
Jul
21
comment .JPEG File upload shell via EXIF comments
@lynks If the script is dropped into the webroot, then the attacker wouldn't need the include(), it can be executed directly. +1 sounds legit.
Jul
8
comment Creating a P2P hosted website
@Jeremy French Yes, the website is free to run JavaScript and use localstorage. A server-side web application would require Tor.
Jul
2
comment Techniques for Anti Virus evasion
@SilverlightFox oah yeah this post was ooold. updated.
Jun
24
comment My Virgin Media account password is visible in plaintext to call center staff. What do I do?
What a noob mistake, you should report them: plaintextoffenders.com
Jun
4
comment Is it possible to do HTTP header injection if CR/LF are stripped?
@immibis yeah \n works alone for all servers/clients in common use. More broadly every CRLF delimited protocol will usually just accept a LF as a delimiter. Don't take my word for it, load up netcat and try it for yourself.
May
8
comment Are phone calls on a GSM network encrypted?
@Andreas Florath Yes, and the A5/1 stream cipher and its key scheduling is a total joke. GSM is one of the most obvious backdoors (well lit frontdoor?) that anyone can access for under $1,000.
May
1
comment Why refresh CSRF token per form request?
@Domi It depends how they got the token in the first place. If it with XSS, or over an insecure channel, the a rolling token wouldn't matter.
Apr
30
comment How can two clicks lead to better security in the context of, e.g., Twitter and Facebook share buttons?
@Bleeding Fingers The NSA is also troubled by this side-effect, which is why they want to backdoor everything, and even collect stats from webbugs.
Apr
30
comment How can two clicks lead to better security in the context of, e.g., Twitter and Facebook share buttons?
Was this question answered?
Apr
25
comment Can webcams be turned on without the indicator light?
@user6373 that is one way of accomplishing the same task, it depends on the device. But, at the end of the day, the lights on the device is controlled by the firmware.
Apr
16
comment Why doesn't the same origin policy block get requests that contain arguments?
It depends on the XHR. But yes for the purposes of CSRF, you should assume that the client can send arbitrary requests, and that the response may be sent by the server, but not visible to the attacker.
Apr
6
comment Why do some people really hate security via client-side?
@Pacerier I am a penetration tester, I study how software is built and how it fails.
Apr
5
comment Why do some people really hate security via client-side?
@Pacerier In my mind, hacker is just a title earned by a highly skilled engineer. No programmer wants to write insecure code, and in order to be a successful penetration tester you have to understand how the application works better than the engineers who wrote it. Studying compsci and understand the theories behind application design is just the first step.
Mar
29
comment Is it possible to emulate real network printer i.e. to run some actual firmware in VM?
@André Daniel Dang, I was going to mention QEMU. It is the dev tool of choice for embedded devices that are njon-x86.
Mar
29
comment Why do some people really hate security via client-side?
@Pacerier I'm in my twenties, and I first started releasing exploits when was in my teens.
Mar
15
comment Google Chrome “Your connection to website is encrypted with obsolete cryptography”
Consider: security.stackexchange.com/questions/76993/…