32,767 reputation
449122
bio website bishopfox.com
location
age
visits member for 4 years, 6 months
seen 8 hours ago

Test everything, trust no one.

Do not trust any security related answers you see on StackOverflow.com (SO) / Security.StackExchange.com (SE). Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is not always chosen.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


2d
answered Can client-side hashing improve after-the-fact security in response to password leaks?
Jul
6
answered Creating a P2P hosted website
Apr
12
answered (httpd log files) What kind of attack is? How can I prevent it?
Mar
1
answered How to safely display html emails like gmail does it?
Feb
17
answered Using INTO OUTFILE with INSERT
Feb
17
answered How can I set my server to only accept requests from my own client app? (similar to SSL Client Certificates)
Feb
16
answered External cross domain include script
Feb
16
answered Session Authentication vs Token Authentication
Feb
16
answered Prevent a desktop client application from abusing an API access token obtained through OAuth2 on behalf of an application
Feb
8
answered Content management url security
Feb
8
answered penetration testing first step
Feb
4
answered XSS outside of the DOM
Feb
3
answered How does xss work with web applications that take payload not through url
Jan
20
answered How to communicate securely
Jan
12
answered Acquiring remote forensic image from EC2 instance
Jan
12
answered Is there a strong protection against CSRF executed from the sames server via stored XSS?
Jan
9
answered What are the security issues of open ports?
Dec
28
asked Now that it is 2015, what SSL/TLS cipher suites should be used in a high security HTTPS environment?
Dec
26
answered Could a compromised WP database cause re-infection without the hacker needing to login into WP?
Dec
10
answered Parallel HTTPS connection remote and local host