31,492 reputation
343114
bio website bishopfox.com
location
age
visits member for 4 years, 2 months
seen 53 mins ago

Test everything, trust no one.

Do not trust any security related answers you see on StackOverflow.com (SO) / Security.StackExchange.com (SE). Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is not always chosen.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


Mar
1
answered How to safely display html emails like gmail does it?
Feb
17
answered Using INTO OUTFILE with INSERT
Feb
17
answered How can I set my server to only accept requests from my own client app? (similar to SSL Client Certificates)
Feb
16
answered External cross domain include script
Feb
16
answered Session Authentication vs Token Authentication
Feb
16
answered Prevent a desktop client application from abusing an API access token obtained through OAuth2 on behalf of an application
Feb
8
answered Content management url security
Feb
8
answered penetration testing first step
Feb
4
answered XSS outside of the DOM
Feb
3
answered How does xss work with web applications that take payload not through url
Jan
20
answered How to communicate securely
Jan
12
answered Acquiring remote forensic image from EC2 instance
Jan
12
answered Is there a strong protection against CSRF executed from the sames server via stored XSS?
Jan
9
answered What are the security issues of open ports?
Dec
28
asked Now that it is 2015, what SSL/TLS cipher suites should be used in a high security HTTPS environment?
Dec
26
answered Could a compromised WP database cause re-infection without the hacker needing to login into WP?
Dec
10
answered Parallel HTTPS connection remote and local host
Dec
3
answered How to perform penetration testing of Blackberry mobile applications?
Nov
30
answered Cannot get simple shellcode runner to work
Nov
30
answered How can two clicks lead to better security in the context of, e.g., Twitter and Facebook share buttons?