Exploiting Path Traversal
Many kinds of functionality oblige a web application to read from or write to a file system on the basis
Read moreweb-app-hacking
Injecting into XPath
The XML Path Language (or XPath) is an interpreted language used for navigating around XML documents, and for retrieving data
Read moreInjecting into SOAP
The Simple Object Access Protocol (SOAP) is a message-based communications technology that uses the XML format to encapsulate data. It
Read moreFile Inclusion Vulnerabilities
Many scripting languages support the use of include files. This facility enables developers to place reusable code components into individual
Read moreA Multi-Layered Privilege Model
Issues relating to access apply not only to the web application itself but also to the other infrastructure tiers which
Read moreSecuring Access Controls
Access controls are one of the easiest areas of web application security to understand, although a well-informed, thorough methodology must
Read moreAttacking Access Controls
Before starting to probe the application to detect any actual access control vulnerabilities, you should take a moment to review
Read moreAttacking Access Controls
Common Vulnerabilities Access controls can be divided into two broad categories: vertical and horizontal. Vertical access controls allow different types
Read moreLog, Monitor, and Alert
The application’s session management functionality should be closely integrated with its mechanisms for logging, monitoring, and alerting, in order to
Read moreLiberal Cookie Scope
The usual simple summary of how cookies work is that the server issues a cookie using the HTTP response header
Read more