Securing Web Server Software
To some extent, an organization deploying a third-party web server product is inevitably placing its fate in the hands of
Read moreweb security
Finding Web Server Flaws
If you are lucky, the web server you are targeting may contain some of the actual vulnerabilities described in this
Read moreEncoding and Canonicalization Vulnerabilities
Encoding flaws have arisen in many kinds of web server software and present an inherent threat in situations where the
Read moreTechnical Challenges Faced by Vulnerability Scanners
The barriers to automation described previously lead to a number of specific technical challenges that must be addressed in the
Read moreA Web Application Hacker’s Toolkit
Some attacks on web applications can be performed using only a standard web browser; however, the majority of them require
Read moreLocal Privacy Attacks
Many users access web applications from a shared environment in which an attacker may have direct access to the same
Read moreAttacking ActiveX Controls
ActiveX controls are of particular interest to an attacker who is targeting other users. When an application installs a control
Read moreJSON Hijacking
JSON hijacking is a special version of an XSRF attack, which in certain circumstances can violate the objectives of the
Read moreHTTP Header Injection
HTTP header injection vulnerabilities arise when user-controllable data is inserted in an unsafe manner into an HTTP header returned by
Read moreAttacking Other Users
The majority of interesting attacks against web applications involve targeting the server-side application itself. Many of these attacks do of course
Read more