31,926 reputation
346116
bio website bishopfox.com
location
age
visits member for 4 years, 3 months
seen 34 mins ago

Test everything, trust no one.

Do not trust any security related answers you see on StackOverflow.com (SO) / Security.StackExchange.com (SE). Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is not always chosen.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


Apr
12
revised (httpd log files) What kind of attack is? How can I prevent it?
deleted 1 character in body
Mar
13
revised OAuth2 Cross Site Request Forgery, and state parameter
deleted 5 characters in body
Mar
11
revised What is the most hardened set of options for GCC compiling C/C++?
deleted 13 characters in body
Mar
1
revised How to safely display html emails like gmail does it?
added 2 characters in body
Mar
1
revised How to safely display html emails like gmail does it?
added 34 characters in body
Feb
24
revised Cross site scripting and the use of http-only cookies?
added 1 character in body
Feb
18
revised How can I set my server to only accept requests from my own client app? (similar to SSL Client Certificates)
added 147 characters in body
Feb
16
revised Prevent a desktop client application from abusing an API access token obtained through OAuth2 on behalf of an application
added 19 characters in body
Feb
16
revised Session Authentication vs Token Authentication
added 55 characters in body
Feb
16
revised External cross domain include script
deleted 4 characters in body
Feb
16
revised External cross domain include script
added 6 characters in body
Feb
16
revised External cross domain include script
added 143 characters in body
Feb
16
revised Would an unnecessarily long password degrade performance of a WPA2 wireless network?
added 1 character in body
Feb
11
revised What is the HTTP “Server” response-header field used for?
added 1 character in body
Feb
9
revised penetration testing first step
added 65 characters in body
Feb
8
revised penetration testing first step
added 109 characters in body
Feb
8
revised penetration testing first step
added 166 characters in body
Feb
8
revised Content management url security
deleted 18 characters in body
Feb
8
revised penetration testing first step
added 135 characters in body
Feb
3
revised How does xss work with web applications that take payload not through url
added 64 characters in body