29,555 reputation
234105
bio website bishopfox.com
location
age
visits member for 3 years, 9 months
seen 31 mins ago

Do not trust any security related answers you see on StackOverflow/Security.StackExchange. Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is almost never chosen.

Test everything, trust no one.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


10h
revised How to exploit this include_once vulnerability in PHP?
added 491 characters in body
11h
revised How to exploit this include_once vulnerability in PHP?
added 102 characters in body
Oct
18
revised Socket.IO Client Security
added 397 characters in body
Oct
18
revised Socket.IO Client Security
added 20 characters in body
Oct
18
revised Socket.IO Client Security
added 20 characters in body
Oct
18
revised Socket.IO Client Security
deleted 7 characters in body
Oct
18
revised Is it any more secure to use a HTML form instead of a javascript popup?
deleted 145 characters in body
Oct
18
revised Is it any more secure to use a HTML form instead of a javascript popup?
added 130 characters in body
Oct
18
revised Is it any more secure to use a HTML form instead of a javascript popup?
added 28 characters in body
Oct
18
revised Is it any more secure to use a HTML form instead of a javascript popup?
deleted 7 characters in body
Oct
16
revised Reflected XSS through cookie value?
added 248 characters in body
Oct
16
revised Unrestricted File Upload Problem
edited tags
Oct
7
revised How can security audits be integrated into an agile project?
added 2 characters in body
Oct
6
revised How can security audits be integrated into an agile project?
added 1 character in body
Oct
6
revised How can security audits be integrated into an agile project?
deleted 11 characters in body
Oct
6
revised How can security audits be integrated into an agile project?
deleted 11 characters in body
Oct
6
revised How can security audits be integrated into an agile project?
deleted 11 characters in body
Oct
4
revised Recommended # of iterations when using PKBDF2-SHA256?
added 5 characters in body
Oct
2
revised Session Hijacked in case javascript blocked
added 4 characters in body
Sep
21
revised Can anti-CSRF token prevent bruteforce attack?
added 30 characters in body