Stephen Rees-Carter

@valorin

Friendly Hacker, Speaker, and PHP & Laravel Security Specialist.🕵️ I write securinglaravel.com and hack stuff on stage for fun. 😈 (he/him)

Brisbane, Queensland

Joined February 2009

Pinned
Stephen Rees-Carter
@valorin
Jun 4, 2024
All my socials 👉 pinkary.com/@valorin Laravel Security: 1️⃣ Weekly Security Tips & In Depth Articles: securinglaravel.com 2️⃣ Practical Security Course: practicallaravelsecurity.com 3️⃣ Security Audits and Penetration Tests: valorinsecurity.com
Stephen Rees-Carter
@valorin
Aug 13
Submitted my first CVEs directly to MITRE due to an unresponsive package maintainer for a very popular package that sits at #5 for a common search term on Packagist. Will be interesting to see how this goes.
Stephen Rees-Carter
@valorin
Aug 6
Um... that's not how risks work... 🤦 This is the rubbish being peddled by big companies selling "Cyber Insurance". 😡
Stephen Rees-Carter
@valorin
Aug 6
One of the most satisfying (and most frustrating!) parts of pentesting is spending an hour setting up the perfect PoC, composing shock-value screenshots, and writing a succinct report - only for them to spend 30 seconds making a trivial code change that fixes the issue. 😈😱
Stephen Rees-Carter
@valorin
Aug 3
SameSite=Lax is the Laravel default, and it quietly protects you from CSRF. So why do I keep finding SameSite=None in the apps I audit? Let's talk about what it does and how to use it safely. securinglaravel.com/security-tip-d… #Laravel
Security Tip: Do You Know Your SameSite Cookies?
From securinglaravel.com