Fingerprinting the Database
Most of the techniques described so far are effective against all of the common database platforms, and any divergences have
Read moreweb-app
The UNION Operator
The UNION operator is used in SQL to combine the results of two or more SELECT statements into a single
Read moreFinding SQL Injection Bugs
In the most obvious cases, a SQL injection flaw may be discovered and conclusively verified by supplying a single item
Read moreInjecting into SQL
Almost every web application employs a database to store the various kinds of information that it needs in order to
Read moreInjecting Code
The topic of code injection is a huge one, encompassing dozens of different languages and environments, and a wide variety
Read moreA Multi-Layered Privilege Model
Issues relating to access apply not only to the web application itself but also to the other infrastructure tiers which
Read moreSecuring Access Controls
Access controls are one of the easiest areas of web application security to understand, although a well-informed, thorough methodology must
Read moreAttacking Access Controls
Before starting to probe the application to detect any actual access control vulnerabilities, you should take a moment to review
Read moreAttacking Access Controls
Common Vulnerabilities Access controls can be divided into two broad categories: vertical and horizontal. Vertical access controls allow different types
Read moreSecuring Session Management
The defensive measures that web applications must take to prevent attacks on their session management mechanisms correspond to the two
Read more