16,021,226 members
Sign in
Sign in
Email
Password
Forgot your password?
Sign in with
home
articles
Browse Topics
>
Latest Articles
Top Articles
Posting/Update Guidelines
Article Help Forum
Submit an article or tip
Import GitHub Project
Import your Blog
quick answers
Q&A
Ask a Question
View Unanswered Questions
View All Questions
View C# questions
View C++ questions
View Javascript questions
View Visual Basic questions
View .NET questions
discussions
forums
CodeProject.AI Server
All Message Boards...
Application Lifecycle
>
Running a Business
Sales / Marketing
Collaboration / Beta Testing
Work Issues
Design and Architecture
Artificial Intelligence
ASP.NET
JavaScript
Internet of Things
C / C++ / MFC
>
ATL / WTL / STL
Managed C++/CLI
C#
Free Tools
Objective-C and Swift
Database
Hardware & Devices
>
System Admin
Hosting and Servers
Java
Linux Programming
Python
.NET (Core and Framework)
Android
iOS
Mobile
WPF
Visual Basic
Web Development
Site Bugs / Suggestions
Spam and Abuse Watch
features
features
Competitions
News
The Insider Newsletter
The Daily Build Newsletter
Newsletter archive
Surveys
CodeProject Stuff
community
lounge
Who's Who
Most Valuable Professionals
The Lounge
The CodeProject Blog
Where I Am: Member Photos
The Insider News
The Weird & The Wonderful
help
?
What is 'CodeProject'?
General FAQ
Ask a Question
Bugs and Suggestions
Article Help Forum
About Us
Search within:
Articles
Quick Answers
Messages
Comments by CdnSecurityEngineer (Top 23 by date)
CdnSecurityEngineer
18-Mar-15 15:16pm
View
Either way it doesn't seem to matter.
CdnSecurityEngineer
7-Dec-14 13:34pm
View
It has something to do with the fact that, my hash map is declared as a member variable of my class, which I really can't say I understand. For example if I change it to be a hashmap of <int,int> then I get the same access violation, however, if the hash map is declared inside the function, ergo on the stack, then everything works out fine.
Therefore it seems to be an issue with the fact the hash_map is declared at the class level which I don't get.
CdnSecurityEngineer
13-Nov-14 1:08am
View
So why not simply remove the file and create a new empty file with the same name... it'd have the same effect.
CdnSecurityEngineer
27-Oct-14 11:19am
View
I am not really prepared to share that information on Code Project. However if you goto. http://security.howellsonline.ca - you will find a way to contact me under the contact me tab.
CdnSecurityEngineer
20-Oct-14 10:29am
View
Look at the MSDN documentation found here:
http://msdn.microsoft.com/en-us/library/system.web.sessionstate.httpsessionstate.sessionid%28v=vs.110%29.aspx
Have a look at: public string SessionID { get; }
So the Session ID itself you cannot change.
Now is your question how do I clear the SessionID cookie? OR what are you really trying to do ?
CdnSecurityEngineer
31-Jan-14 10:31am
View
That's more or less what I was doing. However the code I posted was just debugging code to ensure that everything was functioning correctly. Once I had the bugs worked out I changed it to dump the correct process that I wanted.
CdnSecurityEngineer
28-Jan-14 10:53am
View
Well what debugging have you done? do you have any idea/where how this is failing? I am suspecting that if your call to WScript.CreateObject("MSXML2.ServerXMLHTTP"); if this call is failing, you're going to throw an error before you enter your try.
The other odd thing, is where is localhost resolving too? A browser would resolve that to the local user's computer. Are you sure your user is creating data in the database when they hit this page?
IS port 51611 open on your server?
When you test this are you testing from the server? OR from a client separate and away from the server?
It also seems weird that you're using the GET method to send data back to the server, a WebMethod and a POST, or a Webservice (POST) WebAPI, depending on which version of ASP.NET you're using would be more logical.
CdnSecurityEngineer
28-Jan-14 10:36am
View
I've worked in a similar environment, I am not sure if you, want to contact me directly to avoid divulging to much information. You can contact me at Chris AT howellsonline.ca
CdnSecurityEngineer
27-Jan-14 15:06pm
View
There are a ton of applications which do that sort of thing. The difficulty you have to remember is that, with two monitors, interacting with the same application, you're going to have users from 1 monitor, potentially interfering with users from another monitor. Vice Versa, I am not sure what the backend logic of your application is like. However you might encounter, race conditions etc.
However, if that's your use case, why not make it a web app? Take your backend logic code them into a dll, role your forms into ASP.NET webforms or MVC. Slap some UI on there and just point to different urls in your web app?
CdnSecurityEngineer
27-Jan-14 13:31pm
View
What browsers are you using, does it work in one browser and not an another.
CdnSecurityEngineer
24-Jan-14 13:51pm
View
Ok. So you were correct, I was considering the wrong address.
wt.ReadMemorySpecific(str.c_str(), str.length());
or your solution will also work.
CdnSecurityEngineer
24-Jan-14 13:42pm
View
So what would be your suggestion? I am using VS2012, I just need to get this POC working.
CdnSecurityEngineer
24-Jan-14 13:41pm
View
OK, lets assume, the code is looking at the wrong address. How would you change this function call wt.ReadMemorySpecific(&str, str.length()); to make it point at the right address. str.c_str()?
CdnSecurityEngineer
24-Jan-14 13:17pm
View
Wouldn't reading the string, prevent the compile from optimizing that ?
CdnSecurityEngineer
24-Jan-14 13:16pm
View
OK.... Sure but when you, consider virtual memory allocation. I need to pass the address of the internal buffer, to the function that's reading it. I can't print, stop the the program and then adjust the address I wish for it to read from. Even if I did char* pFoo = "str" and I pass pFoo I am passing a pointer to the memory that contains "str", right??? I still don't get the "str" back.
CdnSecurityEngineer
24-Jan-14 13:12pm
View
Wouldn't reading the string, prevent the compile from optimizing that ?
CdnSecurityEngineer
27-Sep-13 14:22pm
View
I know this. However the specific vulnerability I am targeting a demonstration for relies on the DOCTYPE & DTD processing. Hence why I want to get this example working, so I can make a case not to load and process our XML in such a fashion.
CdnSecurityEngineer
25-Sep-13 15:24pm
View
I think you didn't really understand or solve my question. My question was specifically how do I get xml document to load using XmlDocument to Load. Given the DTD attached. What I specifically want to konw, is why when I do XmlDocument.Load. I don't get entity expansion, can you answer that?
CdnSecurityEngineer
24-Jul-13 11:38am
View
I don't have time to give you the step by step. However, if you do this correctly... I know that this works.
This Blog post works.
CdnSecurityEngineer
11-Jul-13 10:58am
View
I think there are people, like security engineers ;), whom do this analysis for a price. You're asking some detailed questions here and analysis, based on a description. It's real easy to describe how something is supposed to work, and say is it secure? Well perhaps the design is secure but the implementation can be anything but. Therefore it's really difficult to truly understand what you're trying to accomplish here and what you're after. I'd be more then happy to discuss in further detail and help you out if you're interested.
CdnSecurityEngineer
13-Feb-13 12:36pm
View
Hey If you wouldn't mind accepting my answer if you found it helpful!
CdnSecurityEngineer
13-Feb-13 10:49am
View
Unfortunately not.
That would break the "sandboxing" that Microsoft had put in place, if that were possible all you'd have to do is write a vulnerable desktop app and get the user to click it via Metro. Which would then defeat the "security" they've put in place.
CdnSecurityEngineer
8-Feb-13 10:01am
View
Its always good to Dog Food (Use your own) API that's the way it gets flushed out and improved upon.
Even with a well thoughtful API that's well designed you can control the cost of maintaining for 3rd parties.
The most obvious API method is to bundle up a bunch of dlls and distribute that accordingly. Other methods that can help control the cost of an actual API would be something like Web Services. But then you would have to host them some where. Even distributing a bunch of dll's to 3rd parties isn't a costly solution. You just need to be sure to design your interfaces well and version them when appropriate. Then as you start to End of Life some functionality be sure to update your 3rd parties by using compile time symbols, release notes etc.
If you like my answer please accept it!
Cheers,
CdnSecurityEngineer
Show More