1,560 reputation
11028
bio website serverfault.com
location
age 34
visits member for 4 years, 10 months
seen Oct 22 at 5:57

Do not trust any security related answers you see on SO. Not from me, not from anyone. There are very smart people on SO and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.

I have been writing exploit code for more than 4 years. I have spoken 3 years in a row at DEFCON. Currently I am the top answerer and asker of security questions on Stack Overflow.

I actively hunt for vulnerabilities and I have found many over the years. According to the Department of Homeland I have found a vulnerability with a severity metric of 13.5 which makes it into the top 1,000 most dangerous of all time and the most dangerous CSRF vulnerability ever discovered.


Nov
16
comment Web Server Security Overkill?
@Aaron i'm not sure why you'd use nginx. You can use apache+mod_security as a proxy with whatever strange and featureless httpd you demand using.
Oct
27
comment How to exploit data being written to file
@Brian G being forced to write to input.dat isn't an issue alone unless you can pair it with another attack like an LFI vulnerability. Usually being able to write arbitrary files comes up in a directory traversal attack. In short this doesn't sound like a vulnerability.
Oct
27
comment How to exploit data being written to file
@Brian G without any specifics relating to this vulnerably i am posting on how other exploits are able to gain remote code execution by uploading a file.
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
yeah but i'm not getting a .so! thats the whole point of this post.
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
Thanks, but i don't want to use php-cgi. i want a libphp5.so.
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
I have totally used the --enable-so option before. I just grabbed the latest 5.3.3 source from php.net and its not there, i even tried grepping though the -h looking or .so, so such luck. There is a php-cgi option, but i don't want that.
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
Yeah i have that in my ./configure and i'm not getting a .so file. find . | grep "\.so" doesn't find anything :(
Sep
29
comment Can I do a ctrl-z without the process locking up?
and @wzzrd yeah but its not a job, its just a command like firefox.
Sep
28
comment Can I do a ctrl-z without the process locking up?
It says "no such job"
Sep
2
comment Break into Windows 7?
-1 i thought you said no exploits? wtf?
Sep
2
comment Break into Windows 7?
@chunkyb2002 well peter m didn't want to use a bootdisk, and he accepted your answer which is just a straight up black hat attack that does the exact same thing. Its really baffling. I think that people just don't understand security at all.
Aug
29
comment Break into Windows 7?
@Peter M and @chunkyb2002 can someone please explain how this is not an exploit?
Aug
27
comment Break into Windows 7?
@squillman Touché, I wonder why they haven't implemented a word filter.
Aug
27
comment Break into Windows 7?
@Izzy Your welcome to look at my profile for the severity metric, but I don't have a list of the ~25 CVE numbers I've accumulated. After a while you just kind of loose track.
Aug
27
comment Break into Windows 7?
@Izzy Another CVE number would be nice :) Or maybe a bugtraq ID. Another DHS severity metric would be really sweet. Have you ever gotten one of toughs?
Aug
27
comment Break into Windows 7?
@squillman I don't think you should tell people how to use their constitutional rights.
Aug
27
comment Break into Windows 7?
@Izzy exploit writer != scriptkiddie. (Also I write code for aerospace. I just write exploits for fun :)
Aug
27
comment Break into Windows 7?
So let me get this straight, you want to break into windows but a boot disk is too black hat for you. Would a privilege escalation exploit using buffer overflow in kernel level be okay? Or how on earth would you think of breaking into windows without using an exploit or a boot disk? This question is seriously wtf.
Aug
27
comment Break into Windows 7?
@Izzy I'm actually a programmer, I'm happy I'm not a sys admin. Mainly because of people that don't understand the first thing about computers are making decisions about how you should do your job. A boot disk is only a tool.
Aug
27
comment Break into Windows 7?
@Izzy look at the comment i just made to peter m.