When your client says your vulnerability isn't possible in production, but you're waiting to show the POC.
mercredi 8 mars 2017 à 21:00
Seriously, POC or GTFO.
When you are showing your fellow pen testers the XSS vulnerability you discovered and the know it all Lead Security Architect walks over and says "Why don't you just pop a shell on the system now?".
mercredi 8 mars 2017 à 20:00
