Web Security Testing Cookbook

Name: Web Security Testing Cookbook | Systematic Techniques to Find Problems Fast
Brand: O'Reilly
Price: 31.49 EUR
Availability: OnlineOnly

Systematic Techniques to Find Problems Fast

Paco Hope(Author)

O'Reilly (Publisher)

1st Edition

Published on 14. October 2008

314 pages

E-Book

ePUB with Adobe-DRM

System requirements

978-0-596-55403-3 (ISBN)

€31.49incl. 7% vat

System requirements

for ePUB with Adobe-DRM

E-Book Single Licence

Available for download

Description

More details

Other editions

Content

Intro
Table of Contents
Foreword
Preface
Who This Book Is For
Leveraging Free Tools
About the Cover
Organization
Section One: Basics
Section Two: Testing Techniques
Section Three: Advanced Techniques
Conventions Used in This Book
Typographic Conventions
Conventions in Examples
Using Code Examples
Safari® Books Online
Comments and Questions
Acknowledgments
Paco Hope
Ben Walther
Our Reviewers
O'Reilly
Chapter 1. Introduction
1.1 What Is Security Testing?
Providing Evidence
Fulfilling Requirements
Security Testing Is More of the Same
Boundary values
Equivalence classes
Security classes
1.2 What Are Web Applications?
Terminology
Fundamentals of HTTP
HTTP is client-server
HTTP is stateless
HTTP is simple text
1.3 Web Application Fundamentals
Building Blocks
The technology stack
Web Application Structures
Common components
One-layer web applications
Two-layer web applications
Three-layer web applications
The effect of layers on testing
1.4 Web App Security Testing
1.5 It's About the How
How, Not Why
How, Not What
How, Not Where
How, Not Who
How, Not When
Software Security, Not IT Security
Chapter 2. Installing Some Free Tools
2.1 Installing Firefox
Problem
Solution
Discussion
2.2 Installing Firefox Extensions
Problem
Solution
Discussion
2.3 Installing Firebug
Problem
Solution
Discussion
2.4 Installing OWASP's WebScarab
Problem
Solution
Discussion
2.5 Installing Perl and Packages on Windows
Problem
Solution
Discussion
2.6 Installing Perl and Using CPAN on Linux, Unix, or OS X
Problem
Solution
Discussion
2.7 Installing CAL9000
Problem
Solution
Discussion
2.8 Installing the ViewState Decoder
Problem
Solution
Discussion
2.9 Installing cURL
Problem
Solution
Discussion
2.10 Installing Pornzilla
Problem
Solution
Discussion
2.11 Installing Cygwin
Problem
Solution
Discussion
2.12 Installing Nikto 2
Problem
Solution
Discussion
2.13 Installing Burp Suite
Problem
Solution
Discussion
2.14 Installing Apache HTTP Server
Problem
Solution
Discussion
Chapter 3. Basic Observation
3.1 Viewing a Page's HTML Source
Problem
Solution
Discussion
3.2 Viewing the Source, Advanced
Problem
Solution
Discussion
3.3 Observing Live Request Headers with Firebug
Problem
Solution
Discussion
3.4 Observing Live Post Data with WebScarab
Problem
Solution
Discussion
3.5 Seeing Hidden Form Fields
Problem
Solution
Discussion
3.6 Observing Live Response Headers with TamperData
Problem
Solution
Discussion
3.7 Highlighting JavaScript and Comments
Problem
Solution
Discussion
3.8 Detecting JavaScript Events
Problem
Solution
Discussion
3.9 Modifying Specific Element Attributes
Problem
Solution
Discussion
3.10 Track Element Attributes Dynamically
Problem
Solution
Discussion
3.11 Conclusion
Chapter 4. Web-Oriented Data Encoding
4.1 Recognizing Binary Data Representations
Problem
Solution
Hexadecimal data
Octal data
Base 36
Discussion
4.2 Working with Base 64
Problem
Solution
Decode a string
Encode the entire contents of a file
Encode a simple string
Discussion
Recognizing Base 64
Other tools
4.3 Converting Base-36 Numbers in a Web Page
Problem
Solution
Discussion
4.4 Working with Base 36 in Perl
Problem
Solution
Discussion
4.5 Working with URL-Encoded Data
Problem
Solution
Encode
Decode
Discussion
4.6 Working with HTML Entity Data
Problem
Solution
Discussion
Variations on a theme
4.7 Calculating Hashes
Problem
Solution
MD5
SHA1
Discussion
MD5 hashes
SHA-1 hashes
4.8 Recognizing Time Formats
Problem
Solution
Discussion
4.9 Encoding Time Values Programmatically
Problem
Solution
Discussion
4.10 Decoding ASP.NET's ViewState
Problem
Solution
Discussion
4.11 Decoding Multiple Encodings
Problem
Solution
Discussion
Chapter 5. Tampering with Input
5.1 Intercepting and Modifying POST Requests
Problem
Solution
Discussion
5.2 Bypassing Input Limits
Problem
Solution
Discussion
5.3 Tampering with the URL
Problem
Solution
Discussion
5.4 Automating URL Tampering
Problem
Solution
Discussion
5.5 Testing URL-Length Handling
Problem
Solution
Discussion
5.6 Editing Cookies
Problem
Solution
Discussion
5.7 Falsifying Browser Header Information
Problem
Solution
Discussion
5.8 Uploading Files with Malicious Names
Problem
Solution
Discussion
Code injection
5.9 Uploading Large Files
Problem
Solution
Discussion
5.10 Uploading Malicious XML Entity Files
Problem
Solution
Discussion
5.11 Uploading Malicious XML Structure
Problem
Solution
Discussion
5.12 Uploading Malicious ZIP Files
Problem
Solution
Description
5.13 Uploading Sample Virus Files
Problem
Solution
Description
5.14 Bypassing User-Interface Restrictions
Problem
Solution
Discussion
Chapter 6. Automated Bulk Scanning
6.1 Spidering a Website with WebScarab
Problem
Solution
Discussion
6.2 Turning Spider Results into an Inventory
Problem
Solution
Discussion
6.3 Reducing the URLs to Test
Problem
Solution
Discussion
6.4 Using a Spreadsheet to Pare Down the List
Problem
Solution
Discussion
6.5 Mirroring a Website with LWP
Problem
Solution
Discussion
6.6 Mirroring a Website with wget
Problem
Solution
Discussion
6.7 Mirroring a Specific Inventory with wget
Problem
Solution
Discussion
6.8 Scanning a Website with Nikto
Problem
Solution
Discussion
6.9 Interpretting Nikto's Results
Problem
Solution
Discussion
6.10 Scan an HTTPS Site with Nikto
Problem
Solution
Discussion
6.11 Using Nikto with Authentication
Problem
Solution
Discussion
6.12 Start Nikto at a Specific Starting Point
Problem
Solution
Discussion
6.13 Using a Specific Session Cookie with Nikto
Problem
Solution
Discussion
6.14 Testing Web Services with WSFuzzer
Problem
Solution
Discussion
6.15 Interpreting WSFuzzer's Results
Problem
Solution
Discussion
Chapter 7. Automating Specific Tasks with cURL
7.1 Fetching a Page with cURL
Problem
Solution
Discussion
7.2 Fetching Many Variations on a URL
Problem
Solution
Discussion
7.3 Following Redirects Automatically
Problem
Solution
Discussion
7.4 Checking for Cross-Site Scripting with cURL
Problem
Solution
Discussion
7.5 Checking for Directory Traversal with cURL
Problem
Solution
Discussion
7.6 Impersonating a Specific Kind of Web Browser or Device
Problem
Solution
Discussion
Providing customized content
Reacting to User-Agent is rare
7.7 Interactively Impersonating Another Device
Problem
Solution
Discussion
7.8 Imitating a Search Engine with cURL
Problem
Solution
Discussion
7.9 Faking Workflow by Forging Referer Headers
Problem
Solution
Discussion
7.10 Fetching Only the HTTP Headers
Problem
Solution
Discussion
7.11 POSTing with cURL
Problem
Solution
Discussion
7.12 Maintaining Session State
Problem
Solution
Discussion
7.13 Manipulating Cookies
Problem
Solution
Discussion
7.14 Uploading a File with cURL
Problem
Solution
Discussion
7.15 Building a Multistage Test Case
Problem
Solution
Discussion
Notes on execution
The pages that are fetched
How to build this script
7.16 Conclusion
Chapter 8. Automating with LibWWWPerl
8.1 Writing a Basic Perl Script to Fetch a Page
Problem
Solution
Discussion
8.2 Programmatically Changing Parameters
Problem
Solution
Discussion
8.3 Simulating Form Input with POST
Problem
Solution
Discussion
8.4 Capturing and Storing Cookies
Problem
Solution
Discussion
8.5 Checking Session Expiration
Problem
Solution
Discussion
Bad session expirations
8.6 Testing Session Fixation
Problem
Solution
Discussion
8.7 Sending Malicious Cookie Values
Problem
Solution
Discussion
8.8 Uploading Malicious File Contents
Problem
Solution
Description
8.9 Uploading Files with Malicious Names
Problem
Solution
Description
8.10 Uploading Viruses to Applications
Problem
Solution
Description
8.11 Parsing for a Received Value with Perl
Problem
Solution
Discussion
8.12 Editing a Page Programmatically
Problem
Solution
Discussion
8.13 Using Threading for Performance
Problem
Solution
Discussion
Chapter 9. Seeking Design Flaws
9.1 Bypassing Required Navigation
Problem
Solution
Discussion
9.2 Attempting Privileged Operations
Problem
Solution
Discussion
9.3 Abusing Password Recovery
Problem
Solution
Discussion
9.4 Abusing Predictable Identifiers
Problem
Solution
Discussion
9.5 Predicting Credentials
Problem
Solution
Discussion
9.6 Finding Random Numbers in Your Application
Problem
Solution
Discussion
9.7 Testing Random Numbers
Problem
Solution
Discussion
9.8 Abusing Repeatability
Problem
Solution
Discussion
9.9 Abusing High-Load Actions
Problem
Solution
Discussion
9.10 Abusing Restrictive Functionality
Problem
Solution
Discussion
9.11 Abusing Race Conditions
Problem
Solution
Description
Chapter 10. Attacking AJAX
10.1 Observing Live AJAX Requests
Problem
Solution
Discussion
10.2 Identifying JavaScript in Applications
Problem
Solution
Discussion
10.3 Tracing AJAX Activity Back to Its Source
Problem
Solution
Discussion
10.4 Intercepting and Modifying AJAX Requests
Problem
Solution
Discussion
10.5 Intercepting and Modifying Server Responses
Problem
Solution
Discussion
10.6 Subverting AJAX with Injected Data
Problem
Solution
Discussion
10.7 Subverting AJAX with Injected XML
Problem
Solution
Discussion
10.8 Subverting AJAX with Injected JSON
Problem
Solution
Discussion
10.9 Disrupting Client State
Problem
Solution
Discussion
10.10 Checking for Cross-Domain Access
Problem
Solution
Discussion
10.11 Reading Private Data via JSON Hijacking
Problem
Solution
Discussion
Chapter 11. Manipulating Sessions
11.1 Finding Session Identifiers in Cookies
Problem
Solution
11.2 Finding Session Identifiers in Requests
Problem
Solution
Discussion
11.3 Finding Authorization Headers
Problem
Solution
Discussion
11.4 Analyzing Session ID Expiration
Problem
Solution
Discussion
11.5 Analyzing Session Identifiers with Burp
Problem
Solution
Discussion
11.6 Analyzing Session Randomness with WebScarab
Problem
Solution
Discussion
11.7 Changing Sessions to Evade Restrictions
Problem
Solution
Discussion
11.8 Impersonating Another User
Problem
Solution
Description
11.9 Fixing Sessions
Problem
Solution
Description
11.10 Testing for Cross-Site Request Forgery
Problem
Solution
Description
Chapter 12. Multifaceted Tests
12.1 Stealing Cookies Using XSS
Problem
Solution
Discussion
12.2 Creating Overlays Using XSS
Problem
Solution
Discussion
12.3 Making HTTP Requests Using XSS
Problem
Solution
Discussion
12.4 Attempting DOM-Based XSS Interactively
Problem
Solution
Discussion
12.5 Bypassing Field Length Restrictions (XSS)
Problem
Solution
Discussion
12.6 Attempting Cross-Site Tracing Interactively
Problem
Solution
Discussion
12.7 Modifying Host Headers
Problem
Solution
Discussion
12.8 Brute-Force Guessing Usernames and Passwords
Problem
Solution
Discussion
12.9 Attempting PHP Include File Injection Interactively
Problem
Solution
Discussion
12.10 Creating Decompression Bombs
Problem
Solution
Discussion
12.11 Attempting Command Injection Interactively
Problem
Solution
Discussion
12.12 Attempting Command Injection Systematically
Problem
Solution
Discussion
12.13 Attempting XPath Injection Interactively
Problem
Solution
Discussion
12.14 Attempting Server-Side Includes (SSI) Injection Interactively
Problem
Solution
Discussion
12.15 Attempting Server-Side Includes (SSI) Injection Systematically
Problem
Solution
Discussion
12.16 Attempting LDAP Injection Interactively
Problem
Solution
Discussion
12.17 Attempting Log Injection Interactively
Problem
Solution
Discussion
Index

System requirements

Save as PDF Copy link into clipboard

Schweitzer Fachinformationen

Web Security Testing Cookbook

Description

More details

Other editions

Additional editions

Content

System requirements