32,559 reputation
449120
bio website bishopfox.com
location
age
visits member for 4 years, 6 months
seen yesterday

Test everything, trust no one.

Do not trust any security related answers you see on StackOverflow.com (SO) / Security.StackExchange.com (SE). Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is not always chosen.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


Jul
2
comment Techniques for Anti Virus evasion
@SilverlightFox oah yeah this post was ooold. updated.
Jun
24
comment My Virgin Media account password is visible in plaintext to call center staff. What do I do?
What a noob mistake, you should report them: plaintextoffenders.com
Jun
4
comment Is it possible to do HTTP header injection if CR/LF are stripped?
@immibis yeah \n works alone for all servers/clients in common use. More broadly every CRLF delimited protocol will usually just accept a LF as a delimiter. Don't take my word for it, load up netcat and try it for yourself.
May
8
comment Are phone calls on a GSM network encrypted?
@Andreas Florath Yes, and the A5/1 stream cipher and its key scheduling is a total joke. GSM is one of the most obvious backdoors (well lit frontdoor?) that anyone can access for under $1,000.
May
1
comment Why refresh CSRF token per form request?
@Domi It depends how they got the token in the first place. If it with XSS, or over an insecure channel, the a rolling token wouldn't matter.
Apr
30
comment How can two clicks lead to better security in the context of, e.g., Twitter and Facebook share buttons?
@Bleeding Fingers The NSA is also troubled by this side-effect, which is why they want to backdoor everything, and even collect stats from webbugs.
Apr
30
comment How can two clicks lead to better security in the context of, e.g., Twitter and Facebook share buttons?
Was this question answered?
Apr
25
comment Can webcams be turned on without the indicator light?
@user6373 that is one way of accomplishing the same task, it depends on the device. But, at the end of the day, the lights on the device is controlled by the firmware.
Apr
16
comment Why doesn't the same origin policy block get requests that contain arguments?
It depends on the XHR. But yes for the purposes of CSRF, you should assume that the client can send arbitrary requests, and that the response may be sent by the server, but not visible to the attacker.
Apr
6
comment Why do some people really hate security via client-side?
@Pacerier I am a penetration tester, I study how software is built and how it fails.
Apr
5
comment Why do some people really hate security via client-side?
@Pacerier In my mind, hacker is just a title earned by a highly skilled engineer. No programmer wants to write insecure code, and in order to be a successful penetration tester you have to understand how the application works better than the engineers who wrote it. Studying compsci and understand the theories behind application design is just the first step.
Mar
29
comment Is it possible to emulate real network printer i.e. to run some actual firmware in VM?
@André Daniel Dang, I was going to mention QEMU. It is the dev tool of choice for embedded devices that are njon-x86.
Mar
29
comment Why do some people really hate security via client-side?
@Pacerier I'm in my twenties, and I first started releasing exploits when was in my teens.
Mar
15
comment Google Chrome “Your connection to website is encrypted with obsolete cryptography”
Consider: security.stackexchange.com/questions/76993/…
Mar
14
comment How to create a OSx pen testing environment
A mac? I would install a Linux distro with a good package manager.
Feb
18
comment How can I set my server to only accept requests from my own client app? (similar to SSL Client Certificates)
@Daniel Magliola The only one you are fooling with cargo-cult security is yourself.
Feb
18
comment Session Authentication vs Token Authentication
@SilverlightFox Interesting, I was not aware of that weakness. Not surprising coming from Microsoft.
Feb
17
comment Using INTO OUTFILE with INSERT
@Mints97 did you even try this? Sub-selct doesn't allow into outfile.
Feb
17
comment How can I set my server to only accept requests from my own client app? (similar to SSL Client Certificates)
SSL was deprecated over a decade ago, I sure hope you aren't using SSL. TLSv1 or later is the only acceptable secure transport layer.
Feb
16
comment Session Authentication vs Token Authentication
@Hoax that is a separate question. The OAuth flow is really useful.