Preventing Path Traversal Vulnerabilities
By far the most effective means of eliminating path traversal vulnerabilities is to avoid passing user-submitted data to any file
Read moreweb
Exploiting ODBC Error Messages (MS-SQL Only)
If you are attacking an MS-SQL database, then there are alternative ways available of discovering the names of database tables
Read moreExtracting Useful Data
In order to extract useful data from the database, you normally need to know the names of the tables and
Read moreFingerprinting the Database
Most of the techniques described so far are effective against all of the common database platforms, and any divergences have
Read moreInjecting into SQL
Almost every web application employs a database to store the various kinds of information that it needs in order to
Read moreDisclosure of Tokens in Logs
Aside from the clear-text transmission of session tokens in network communications, the most common place where tokens are simply disclosed
Read moreSecuring Authentication
Implementing a secure authentication solution involves attempting to simultaneously meet several key security objectives, and in many cases trade off
Read more