This document discusses threats to web applications and methods for hacking them. It describes how web applications work with front-end and back-end components. Common threats are discussed like SQL injection, cross-site scripting, and denial of service attacks which can be carried out by exploiting unvalidated user input or session management. Methods for analyzing and attacking web applications are outlined along with techniques for authentication, authorization, session, and injection attacks. Finally, the document covers countermeasures to secure web applications.
This document discusses threats to web applications and methods for hacking them. It describes how web applications work with front-end and back-end components. Common threats are discussed like SQL injection, cross-site scripting, and denial of service attacks which can be carried out by exploiting unvalidated user input or session management. Methods for analyzing and attacking web applications are outlined along with techniques for authentication, authorization, session, and injection attacks. Finally, the document covers countermeasures to secure web applications.
This document discusses threats to web applications and methods for hacking them. It describes how web applications work with front-end and back-end components. Common threats are discussed like SQL injection, cross-site scripting, and denial of service attacks which can be carried out by exploiting unvalidated user input or session management. Methods for analyzing and attacking web applications are outlined along with techniques for authentication, authorization, session, and injection attacks. Finally, the document covers countermeasures to secure web applications.
This document discusses threats to web applications and methods for hacking them. It describes how web applications work with front-end and back-end components. Common threats are discussed like SQL injection, cross-site scripting, and denial of service attacks which can be carried out by exploiting unvalidated user input or session management. Methods for analyzing and attacking web applications are outlined along with techniques for authentication, authorization, session, and injection attacks. Finally, the document covers countermeasures to secure web applications.
Process an non-validated input from the client to the back-end. This is a major vulnerability, this is the basics of injection attacks (SQL injection, xss, buffer overflow).
Parameter / Form Tanmpering
Parameter tempering is an attack, where the attacker manipulate the parameter while client and server are communicating with each other. Parameters such as Uniform Resource Locator (URL) or web page form fields are modified (cookies, HTTP Header, form fields).
Injection Flaws
Works if a web application allows untrusted input to be executed.
Injection of malicious SQL queries. Attacker can manipulte the database These vulnerabilities can be detected by using an automated scanner.
Command Injection
Shell injection File injection HTML embedding
LDAP Injection
2/5 14_Hacking_Web_Applications.md 4/10/2019
Attacker can access the database using LDAP filter to search information.
DoS Attack
User Registartion DoS : an automated process, the attacker keep registering fake accounts. Login DoS : attacker keep sending login requests. User Enumeration : attacker brute force login credebtials with a dictionary attacks. Account Lock : attacker attempt to lock the user account by attempting invalid passwords.
Accessing the web application with low level privilege account, then escalate privileges to get information Parameter tampering (URL, POST data, Query string, cookies, HTTP header)
Exploit the data connectivity between application and its database. Data connection requires a connection string.
Connetcion String Injection
Connection String Parameters Pollution (CSPP) Connection Pool DoS
Countermeasures Percent Encoding Percent Encoding or URL Encoding is a technique for secure handling of URL by replaces unsafe and non-ascii characters with % followed by two hexadecimal digits.
Example:
%20 or + both are used for SPACE
In URL:, there are some reserved character such as '/' that is used to separate paths in URL. To use this not as separator, then it must be encoded.
%2F used for '/'
Full list of percent encoded characters here
HTML Encoding HTML Encoding specify how special character will shown.
SQL Injection Contermeasures
Input validation Customized error messages Monitoring database traffic Limit length of user input
