Tag Info

New answers tagged

0

Sorry for posting this as an answer - I can't comment with my rep yet - just joined this part of stack exchange. Run the SQLMap with higher verbose level, like -v3 or -v6. -v3 will show the requests SQLMap makes and you should be able to determine (or update your question) with more specific info on what generates the HTTP 404 response. -v6 will ...


1

We have an OWASP project which tracks vulnerable web apps: https://www.owasp.org/index.php/OWASP_Vulnerable_Web_Applications_Directory_Project The OWASP Top 10 is actually all about risks rather than vulnerabilities. So its not really possible to have simple examples for all of them. For example, how many ways are there to 'misconfigure security' (A5)? As ...


0

You can take a look at the the Software Assurance Reference Dataset http://samate.nist.gov/SARD/index.php - These are effectively vulnerable code snippits for multiple programming languages and include the OWASP top 10 vulnerabilities. However, if you want to try live examples you can try a number of opensource or commercial wargame apps: HackMe Owasp ...


4

There are loads. Mutillidae, Damn Vulnerable Web App, WebGoat, BWaPP etc. Also, check out vulnhub, hack.me and others like them.


-1

Check out Codebashing and their sql injection demo. They have developed a cloud hosted application security training platform that offers interactive tutorials which also lets developers/students test security issues using sandboxed war games. Very similar to Codeacademy but for application security. Full Disclosure - I am a content developer at ...


0

The address bar doesn't do anything. It's the web application which appearently takes the URL and inserts it right into the HTML markup, leading to a cross-site scripting vulnerability. This happens either server-side or client-side: Either the PHP script delivers the page with the URL already in it, or there's a piece of JavaScript code which injects the ...


0

That is the same as filling a form which has an input field named page with the following data text-file-viewer.php/"><script>alert("test");</script> If you get the alert pop-up, the server is writing the user input as is.


1

. It is necessary to have the session invalidated so after logging out no protected resources can be accessed. But why should I want to change the session id? Defense in depth? The Session ID itself can be viewed as a piece of private information that was associated with the authenticated user session. Clearing this ID from the client side ensures that ...


4

Because of possible session fixation: http://en.wikipedia.org/wiki/Session_fixation In computer network security, session fixation attacks attempt to exploit the vulnerability of a system which allows one person to fixate (set) another person's session identifier (SID). Most session fixation attacks are web based, and most rely on session ...


1

It's another way of saying the same thing. The goal is that a malicious user who captures the session id of an authenticated user should not be able to continue to use that session id to interact with the application as the authenticated user after the user has logged out. After log out, the application should no longer recognize that session id. From an ...



Top 50 recent answers are included