Injecting into XPath
The XML Path Language (or XPath) is an interpreted language used for navigating around XML documents, and for retrieving data
Read moreweb-site hacking
Injecting into SOAP
The Simple Object Access Protocol (SOAP) is a message-based communications technology that uses the XML format to encapsulate data. It
Read moreExploiting ODBC Error Messages (MS-SQL Only)
If you are attacking an MS-SQL database, then there are alternative ways available of discovering the names of database tables
Read moreA Multi-Layered Privilege Model
Issues relating to access apply not only to the web application itself but also to the other infrastructure tiers which
Read moreLiberal Cookie Scope
The usual simple summary of how cookies work is that the server issues a cookie using the HTTP response header
Read moreAttacking Session Management
The session management mechanism is a fundamental security component in the majority of web applications. It is what enables the
Read more