Extracting Useful Data
In order to extract useful data from the database, you normally need to know the names of the tables and
Read moreETHICAL HACKING
Securing Access Controls
Access controls are one of the easiest areas of web application security to understand, although a well-informed, thorough methodology must
Read moreAttacking Access Controls
Common Vulnerabilities Access controls can be divided into two broad categories: vertical and horizontal. Vertical access controls allow different types
Read moreSecuring Session Management
The defensive measures that web applications must take to prevent attacks on their session management mechanisms correspond to the two
Read moreVulnerable Mapping of Tokens to Sessions
Various common vulnerabilities in session management mechanisms arise because of weaknesses in the way the application maps the creation and
Read moreDisclosure of Tokens in Logs
Aside from the clear-text transmission of session tokens in network communications, the most common place where tokens are simply disclosed
Read moreWeaknesses in Session Token Handling
No matter how effective an application is at ensuring that the session tokens it generates do not contain any meaningful
Read moreWeaknesses in Session Token Generation
Session management mechanisms are often vulnerable to attack because tokens are generated in an unsafe manner that enables an attacker
Read moreHacking & Ethical Hacking
Hacking Gaining access to a system that you are not supposed to have access is considered as hacking. For example:
Read more