Tagged Questions

0
votes
1answer
99 views

Please recommend scanner that allows to find XSS and SQL injections vulnerabilities for Web Application [closed]

We develop Web Application: Platform is Redhat 6.3/6.4 Presentation tier is JSF2 Persistence tier is Hibernate Server is JBoss 4 Database is PostgreSQL 9.0.13. We want to run scanner during our ...
4
votes
2answers
71 views

Executing arbitrary commands through iptables-restore input

During a pentest I found a way to add arbitrary iptables firewall rules to a server. These rules get applied by way of the iptables-restore command, and I've been wondering whether there is any way to ...
-5
votes
0answers
86 views

IT Security professional or software developer.. which is a better career option? [closed]

I am a fresher out of college. I have completed my masters in computer applications. Currently i am working as a java developer in an IT services firm ( a pretty big one). I am good at development ...
4
votes
3answers
197 views

What dangerous characters need to be filtered from user input prior to use in a DB2 SQL query?

I'm looking to fully understand how to properly filter/escape dangerous characters from user input that will be interpolated into a DB2 SQL query. The sanitization routing that I'm analyzing works ...
0
votes
1answer
79 views

All I see is RPC, how do I proceed?

I finished a tiered hacking exercise, and after submitting it was told that the last tier (a machine on the network) was not possible to attack in the given exercise. The machine was only running ...
0
votes
1answer
82 views

A list of very specific infosec topics with very fine detail [closed]

CISSP CBK seems relatively rudimentary and extremely broad. Does anyone know a good resource that lists (a nice, long list) topics in information security with a very, very fine granularity? This: - ...
0
votes
0answers
148 views

GWAPT - Training Experiences/Questions [closed]

I'm heavily considering the GWAPT certificate, I'm wondering: http://www.giac.org/certification/web-application-penetration-tester-gwapt Has anyone done the online version of it? What is it like? Is ...
7
votes
5answers
392 views

How do small businesses handle web app security?

Everything on Owasp's top 10 list, how do current small businesses (< 1000 employees) handle web application security, along with mobile security of their applications? Do they care about info/app ...
10
votes
3answers
548 views

Tools to help test the security of Android applications

What are some decent frameworks to test the security of Android applications? With frameworks I mean either software based to automatically scan these applications or a guide (like OWASP has for ...
-4
votes
4answers
257 views

Should companies use Crowd Source Audit Platform for Manual Penetration Test?

As a CIO, CISO, CTO or Sys Admin, would you use a crowd sourced platform for penetration tests in order to improve your security issues? LE: So most of you guys downgrade, and said it's wrong to have ...
1
vote
1answer
402 views

Example of attack trees in the web application security analysis

Here I am again asking for some informations about attack trees usage in web application analysis. For my master thesis I decided to study the usage of this formalism in order to reppresent attacks ...
5
votes
1answer
316 views

question for pentesters: PHP proc_open() in safe_mode

Can anybody explain to me how proc_open() is affected when PHP is running in safe_mode? As far as i have noticed, the command to execute is appended to a '/' - is there anything else and is it ...
4
votes
1answer
1k views

Benefits to ArchPwn over BackTrack

Besides BackTrack having a cooler name and the whole Ubuntu vs. Arch Linux thing, what are the relative benefits of ArchPwn over BackTrack? Are the tools broadly the same, or does one have better ...
0
votes
1answer
240 views

Business systems development (.NET, Java) vs IT Security Field, salary/future perspective

What are the career prospects for young professionals, when comparing IT Security field (penetration testing, vulnerability research) to business development on .NET and Java? Which path should one ...
5
votes
3answers
1k views

Where can I find exploit code?

I am doing VA/PT on a sample web application. I run the nessus scanner and I found some high severity problems. It is related to HP System Management Homepage. The CVE numbers are: 2010-1917, ...
0
votes
1answer
297 views

What are some good resources for learning how to hack my website? [closed]

Note: This is for my personal use. I'm not going to hack someone else's website. I have several websites, and I'd like to learn how to hack them so that I can secure them. Where can I find some good ...
4
votes
3answers
524 views

Open source web application penetration testing community

I do web development for a living but my real passion is security. I have worked with countless open source web application/framework and I have found vulnerabilities in most of them. The main cause ...
1
vote
1answer
116 views

WebServices Security [closed]

Do we have any good resources on WebServices Security? Any book, pdfs, articles and even the detail answers regarding the securing web services would be appreciated.
5
votes
3answers
320 views

What are the security considerations for setting up a basic security testing environment?

I only have 2 spare machines and both are very old, but I really want to set up an environment so that I can start practicing security. One of these machines has a Pentium 4 processor and 512 MB RAM; ...
9
votes
4answers
513 views

Is there a typical step-by-step A-Z process for testing a Web site for possible exploits?

I'm interested less in the tools of the trade (there are many questions here already about that), and I am interested more in the process by which you would go about using those tools. So for ...
8
votes
1answer
731 views

How to perform penetration testing on a Flex application?

Possible Duplicate: What tools are there to inspect Flash SWF files? I have decompiled it, verified the source. All seems fine. Appscan also is not able to find anything in this case. But I ...
9
votes
2answers
483 views

Cross site scripting verification on a field which does not accept more than 20 characters

While performing penetration testing, I got stuck to a point. There is a text field which does not accept more than 20 characters(server side validation). I inserted following piece of code to check ...
4
votes
1answer
1k views

Are there any tools for automated penetration testing of Silverlight applications?

I'd like to find a tool to assist with automated penetration testing of Silverlight applications, in a similar vein to AppScan for webapps. Specifically, I'm looking for a tool that can cope with ...
10
votes
6answers
1k views

Security review: “HTTP header user-agent has been set to (something)”

We got a security review done of our PHP code and they team advised this in their report (amongst other things): /appdir/ Details The HTTP header user-agent has been set to \" . Request GET ...
12
votes
3answers
293 views

Are there any decent web app security scanners that can integrate with a build server?

I've spent a lot of time in TeamCity recently and the nightly code quality metrics coming from the dupe finder, FxCop and NDepend have been great. What I'd really like to do is find a decent web app ...
6
votes
1answer
626 views

Is there any recommended Java library for penetration testing?

Does anyone have any recommendations for a good Java library which can be used for penetration testing? I once read about a library which I think was called 'Attack lib' but I can't find it anymore. ...
6
votes
3answers
2k views

How much does a security audit cost?

For a PHP CMS, what should I expect to budget for a security audit, both whitebox and blackbox? The codebase is about 85,000 LOC and I would probably use a North American company for testing. I really ...
4
votes
0answers
637 views

Best website to learn computer security basics? [duplicate]

Possible Duplicate: Resources to learn about security Can someone advice on which are the good sites out there to learn the basics of computer security from?
12
votes
2answers
494 views

How can I test my web application for timing attacks?

race conditions, etc. Are there automatic tools for this? What manual techniques should I use? From the Area51 proposal
17
votes
4answers
2k views

What tools are there to inspect Flash SWF files?

I am performing a penetration test against a website that uses Flash heavily. What tools can I use to examine the SWF file for vulnerabilities? From the Area51 proposal.
6
votes
3answers
176 views

Defending site against being abused by phishing

Say you have a web site and you are using some returnUrl URL parameter to redirect user back to page where he was after login or editing some records in user area. Is there some standard way how to ...
7
votes
5answers
840 views

Automated tools vs. Manual reviews

What are the advantages of using automated tools, as opposed to manual review? What are the disadvantages? This applies both to external blackbox vulnerability scanning, and to static code analysis. ...
10
votes
3answers
1k views

White-box vs. Black-box

What are the relative advantages and disadvantages of each form of testing? I.e. What is the difference between static code analysis and runtime/dynamic penetration testing? What are the pros and cons ...
6
votes
4answers
149 views

Is external vuln scanning sufficient?

Is running an automated application vulnerability scanner sufficient to certify our application is secure? Why isn't it? From the original Area51 proposal.
30
votes
4answers
2k views

New XSS cheatsheet?

There is a great list of XSS vectors avaliable here: http://ha.ckers.org/xss.html, but It hasn't changed much lately (eg. latest FF version mentioned is 2.0). Is there any other list as good as this, ...
1
vote
2answers
799 views

Web Crawler for ASP.NET site

Do you know any crawler/spider software, which is able to go through ASP.NET application, not ASP.NET MVC, but the one full of __doPostBack JavaScript functions on every link/button/change event? If ...
11
votes
9answers
1k views

What are some good website security scanning solutions?

What are some good web-based website security scanning solutions? I'm not too concerned if they are web-based solutions, or software that can be run locally. Generally, I'm looking for something we ...
21
votes
5answers
2k views

How to perform a security audit for a PHP application?

I have a PHP application that I would like to have audited for security. I'm familiar with most of the general security issues, but want to make sure I didn't miss anything. What steps should I take ...