vulnerabilitati in magazinele online
Joi, Decembrie 3rd, 2009Am fost in weekend la bran la Internet fara cravata. Ce s-a intamplat acolo scrie f bine Andrei Radu iar poze si restul impresiilor live cred ca sunt pe twitter.
Eu am vorbit despre vulnerabilitati in magazine online si mai exact despre:
•SQL Injection (parametrii, ajax, cookie)
•XSS
•Cookie generation
•Cookie steal
•Weak passwords
•Atacuri la sesiune – generarea de id-uri
•Http Header injection /response splitting (location, setcookie)
•File download injection
•Email header injection
•Directory traversal
•Race condition
•Clickjacking
•Ftp bounce attack
•Remote file inclusion
•Refferer spoofing
•Session poisoning (session modification)
Cookie stuffing
DOS
DNS Rebinding
HTTP Response smuggling (in proxy/cache)
Order number / id generation
DOS
DNS Rebinding
HTTP Response smuggling (in proxy/cache)
Order number / id generation
