Web Application Attacks

Let’s start with the explanation of the session management role. This mechanism is a fundamental security component in the majority of web apps. It enables the application to uniquely identify a given user across a […]

As we are already well introduced, any kind of web app is depending on the other layers of the technology stack which support it, and also including the application or the web server, networking infrastructure […]

All the attack techniques we described so far involved interacting with a live running app and have largely consisted of submitting the crafted input to the application and monitoring its responses. We will now examine […]

We won’t introduce any new vulnerabilities we haven’t talked about already. We will here examine one key element in the effective methodology for hacking web apps. It will be all about the use of automation […]

We will start this topic by saying that the web app architecture is the important area of the security which is frequently overlooked when the security individual apps are appraised. The tiered architectures are commonly […]

There are some attacks on the web app which can be performed using only a standard web browser. Although, most of them require you to use some kind of the additional tools. Those tools operate […]

Today, we will describe the ways in which you can extract the further information from the app during an actual attack. Well, this actually mainly involves interfacing with the app in the unexpected and also […]

We talked about many different kinds of attacks. All of them have the same strategy-direct targeting the server-side application. But, the attacks that we are going to describe now fall under the different category. Here, […]

We will introduce you now with server and application mapping tools. I will try to make it all clear for you, and I know that you will understand this process after you get some knowledge […]

We all heard already that the compiled software which runs in a native execution environment has historically been plagued by vulnerabilities such as buffer overflows and format string bugs. But, most web apps are written […]