Tag Info

New answers tagged

3

I would probably take the following steps: Identify a URL on your site where a CSRF attack could have a negative effect on your site. For this example lets say a GET request to http://mysite.com/account/del will delete the account you are logged in as Next create a basic HTML page that is totally separate from the site you are testing. On this HTML page ...


-1

It was really nice to hunt for my question all by myself. Here's my blog that contains the answer (cLick here)


1

It's not fancy. You look at some cookies from the website and try to figure out what information they encode, then try to change the values returned and see if it does anything useful to you. At one extreme, a cookie value like UserToken=f7a7731073f766c6f555a0b9a821dded is unlikely to be any use to you. But if you have cookies like Item=iPhone6&Price=899 ...


0

I haven't used android emulator but have used Fiddler to debug traffic on an iPad.


0

I am coming from your post from the null group. Glad you got almost closer to 0wn the system;) in sqlmap's parlance LEVEL could mean two things. I am responding to your edit on Sept 4 12.58. -v (1-6) is the verbosity level, which is used to output specify the amount of messages sqlmap spits to the screen. --level (1-5) is the sqli detected level. If the ...


0

Are you able to replay the request in burp? (Send To Repeater => Go) If so the easy way to get this into SQLMap is to use the CO2 extension which adds "Send to SQLMap" in the right-click menu this gives you the command-line to give to SQLMap with all your cookies and any data in the request.


0

What it looks like you are trying to do is to run SQLmap on a static text file. The Request file is designed to capture requests to REPLAY against the server. Your command needs the proxy or URL you need to test.


2

Here is a slightly outdated but good set of information on making extensions: https://www.scriptjunkie.us/2011/08/writing-meterpreter-extensions/


0

There is the sand cat projet which provide a lot of pen testing tools, like scripting in lua, better view over the console and dynamic injection tools, and a lot of other good surprise.


3

When something like Burp finds an XSS vulnerability, I can't ever verify it when using something like TamperData. If you are already using Burp to find the vulnerability, why not use the intercepting proxy functionality to modify the request and to inject the XSS payload?


5

Your best bet would be mantra from OWASP: http://www.getmantra.com/ Contains a myriad of tools for penetration testing out of the box. Also open source should you need to add/modify anything.


8

Most browsers allow you to disable the function. For instance with chrome you need to start the browser using C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --args --disable-web-security For Firefox you have to go type about:config in the address bar. Then you need to set the browser.urlbar.filter.javascript to False. For Internet Explorer ...


2

The market for a penetration testing lab is probably a tiny subset of the market for penetration testing services and an even tinier subset of the market for information security. I'd encourage you to do your own investigation by reaching out to potential prospects, but a resource which may be of use is the Delling Institute. See: ...



Top 50 recent answers are included