30,838 reputation
340110
bio website bishopfox.com
location
age
visits member for 4 years
seen 2 hours ago

Test everything, trust no one.

Do not trust any security related answers you see on StackOverflow.com (SO) / Security.StackExchange.com (SE). Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is not always chosen.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


Jan
20
answered How to communicate securely
Jan
12
answered Acquiring remote forensic image from EC2 instance
Jan
12
answered Is there a strong protection against CSRF executed from the sames server via stored XSS?
Jan
9
answered What are the security issues of open ports?
Dec
28
asked Now that it is 2015, what SSL/TLS cipher suites should be used in a high security HTTPS environment?
Dec
26
answered Could a compromised WP database cause re-infection without the hacker needing to login into WP?
Dec
10
answered Parallel HTTPS connection remote and local host
Dec
3
answered How to perform penetration testing of Blackberry mobile applications?
Nov
30
answered Cannot get simple shellcode runner to work
Nov
30
answered How can two clicks lead to better security in the context of, e.g., Twitter and Facebook share buttons?
Nov
30
answered Is it considered a CSRF if it requires a unique identifier which is not a CSRF token - not tied to the user session?
Nov
30
answered How can I explain to the client that rfc2385 TCP MD5 Checksums can't be turned on for linux webservers?
Nov
26
answered Someone faxed me a bunch of black paper
Nov
13
answered Clarification on OAuth Client Secret
Nov
13
answered Proper way to allow access to systems within different offices?
Nov
11
answered SQL Injection Modify / Insert Table Values
Nov
5
answered defend against LOIC Hive Mind attack
Nov
2
answered Intercepting SSL traffic on Android app
Nov
1
answered CSP Reports: Ignoring Client Malware
Nov
1
answered Bypass Full ASLR+DEP exploit mitigation