Extracting Useful Data
In order to extract useful data from the database, you normally need to know the names of the tables and
Read morewebsite
Disclosure of Tokens in Logs
Aside from the clear-text transmission of session tokens in network communications, the most common place where tokens are simply disclosed
Read moreWeaknesses in Session Token Handling
No matter how effective an application is at ensuring that the session tokens it generates do not contain any meaningful
Read morePredictable Tokens
Some session tokens do not contain any meaningful data associating them with a particular user but are nevertheless guessable because
Read moreWeaknesses in Session Token Generation
Session management mechanisms are often vulnerable to attack because tokens are generated in an unsafe manner that enables an attacker
Read moreAttacking Session Management
The session management mechanism is a fundamental security component in the majority of web applications. It is what enables the
Read moreDefects in Multistage Login Mechanisms
Some applications use elaborate login mechanisms involving multiple stages. For example: ■ Entry of a username and password. ■ A
Read moreImplementation Flaws in Authentication
Even a well-designed authentication mechanism may be highly insecure due to mistakes made in its implementation. These mistakes may lead
Read moreNon-Unique Usernames
Some applications that support self-registration allow users to specify their own username, and do not enforce a requirement that usernames
Read moreUser Impersonation Functionality
Some applications implement the facility for a privileged user of the application to impersonate other users, in order to access
Read more