Technical Challenges Faced by Vulnerability Scanners
The barriers to automation described previously lead to a number of specific technical challenges that must be addressed in the
Read moreWebsite
Vulnerability Scanners
A number of different tools exist for performing automated vulnerability scans of web applications. These scanners have the benefit of
Read moreManual Request Tools
The manual request component of the integrated test suites provides the basic facility to issue a single request and view
Read moreIntegrated Testing Suites
After the essential web browser, the most useful item in your toolkit when attacking a web application is an intercepting
Read moreA Web Application Hacker’s Toolkit
Some attacks on web applications can be performed using only a standard web browser; however, the majority of them require
Read moreLocal Privacy Attacks
Many users access web applications from a shared environment in which an attacker may have direct access to the same
Read moreAttacking ActiveX Controls
ActiveX controls are of particular interest to an attacker who is targeting other users. When an application installs a control
Read moreSession Fixation
Session fixation vulnerabilities typically arise when an application creates an anonymous session for each user when they first access the
Read moreJSON Hijacking
JSON hijacking is a special version of an XSRF attack, which in certain circumstances can violate the objectives of the
Read moreFrame Injection
Frame injection is a relatively simple vulnerability that arises from the fact that in many browsers, if a web site
Read more