Tag Info

Hot answers tagged

4

Injection Attacks can be thought of as a generalized version of SQL Injection Attacks. Any attack which uses techniques similar to SQL injection to insert characters in the front end to invoke unexpected actions on the back end can be thought of as an Injection Attack. Consider what kinds of escape characters, improper type handling, etc could make their ...


4

This kind of testing can be incredibly fun and can expose a wide variety of defects outside of its core focus; making sure you can't destroy data. I'm no expert but I do have a few tips I hope you'll find helpful. There are a variety of ways to try and inject SQL queries and commands into the web application; text input fields are the most obvious but ...


3

OWASP has several great resources to learn about xss, sql injection, etc. I suggest you check out their WebGoat project and the Testing Project. These are both great resources to get you started and are free. WebGoat is a deliberately insecure J2EE web application maintained by OWASP designed to teach web application security lessons. In each lesson, ...


3

From Application level you need to check how does the code handle parameters. Are there any validations done on this parameters (Length, Datatype checks) Best Practices Use of parameterized queries Use Procedures Grant only execute permission for SP. No DDL operations for users Alternative I would suggest you look at how code is written You can check ...


3

If you are hoping to find the vulnerabilities through an automate scan Open the application, click "Start New Scan", enter the address, and then start scan. Please note, the community edition will really only find low hanging fruit. Anything more difficult requires a subscription. If you're hoping to do some manual testing for injection vulnerabilities, ...


3

I think much like any new application, once you get it up and running walk through any demos that may be provided. If there are forums you might want to look at those as well. Clearly as their site indicates as you are working with it be sure you are only doing it against a site that you are authorized to perform that sort of penetration testing on.


2

Have some cheese! Google has a great resource just for this purpose. Gruyere is a website they have created to help developers (and testers) with security flaws. The app is full of security holes and google has written challenges setup for you to break the site. It's really wonderful. Each challenge is labeled with a style (black box, white box, ...


2

I think this question is more suited at http://security.stackexchange.com . The following questions has been answered over there which are similar to your question: what-are-some-good-website-security-scanning-solutions testing-sql-injection-using-sqlmap im-trying-to-find-how-to-exploit-my-sql-code testing-php-form-injection testing-for-dangling-cursor


1

If you want to learn hacking/cracking/black hat stuff, Google is your friend, but if you want specific information about the topic there are security training programs: https://www.eccouncil.org/certification/certified_ethical_hacker.aspx There appear to be many programs, each selling its own manual. If that's too much and your interest is less formal, ...


1

I must say, I loved BrMcMullin's answer. This is an area where using tools can teach you a lot. There are plenty of good open source and free one's, however, I'm not familiar with most of them (company shelled out for some nice vulnerability management software). You could always check out a site like penTestIT for some recommendations. Personally, since ...



Only top voted, non community-wiki answers of a minimum length are eligible