Encoding and Canonicalization Vulnerabilities
Encoding flaws have arisen in many kinds of web server software and present an inherent threat in situations where the
Read moreAuthor: Krishna
Path Traversal Vulnerabilities
Accipiter DirectServer This path traversal flaw could be exploited by placing URL-encoded dot-dot-slash sequences into a request. For more information
Read moreVulnerable Web Server Software
Web server products range from extremely simple and lightweight software which does little more than serve up static pages, to
Read moreAttacking the Web Server
As with any kind of application, a web application is dependent on the other layers of the technology stack that
Read moreBuffer Overflow Vulnerabilities
Buffer overflow vulnerabilities occur when an application copies user-controllable data into a memory buffer that is not sufficiently large to
Read moreTechnical Challenges Faced by Vulnerability Scanners
The barriers to automation described previously lead to a number of specific technical challenges that must be addressed in the
Read moreVulnerability Scanners
A number of different tools exist for performing automated vulnerability scans of web applications. These scanners have the benefit of
Read moreManual Request Tools
The manual request component of the integrated test suites provides the basic facility to issue a single request and view
Read moreIntegrated Testing Suites
After the essential web browser, the most useful item in your toolkit when attacking a web application is an intercepting
Read moreA Web Application Hacker’s Toolkit
Some attacks on web applications can be performed using only a standard web browser; however, the majority of them require
Read more