Wrong confirmation ID

Email
Favorite
Favorited ×
Download
Embed
Private Content
Copy and paste this code into your blog or website Copy Customize Close
We have emailed the verification/download link to "".
Login to your email and click the link to download the file directly.

To request the link at a different email address, update it here. Close
Validation messages. Success message. Fail message.

Check your bulk/spam folders if you can't find our mail.

Tweet

Extreme Web Hacking - h2hc 2008

by Conviso Application Security on Nov 11, 2008

1,769 views

Accessibility

View text version

Categories

Technology

Tags

Upload Details

Uploaded via SlideShare as Microsoft PowerPoint

Usage Rights

© All Rights Reserved

File a copyright complaint

4 Embeds 134

http://wagnerelias.com	130
http://www.slideshare.net	2
http://www.infoblogs.com.br	1
http://infoblogs.com.br	1

Statistics

Favorites: 0
Downloads: 0
Comments: 0
Embed Views: 134
Views on SlideShare: 1,635
Total Views: 1,769

Extreme Web Hacking - h2hc 2008 — Presentation Transcript

Wagner Elias > Extreme Web Hacking http://wagnerelias.com São Paulo, 09/11/2008
GET Info
Web Security é Simples
Não Estúpido
Extreme Web Resources
AJAX INSECURITY - 1
AJAX INSECURITY - 2
JSON INSECURITY var json = "['Wagner', 2008, ''];alert('XSS');//']" var myArray = eval(json);
XML INSECURITY - 1 <?xml version="1.0" encoding="ISO-8859-1"?> <!DOCTYPE foo [ <!ELEMENT foo ANY> <!ENTITY xxe SYSTEM "file://c:/boot.ini"> ]> <foo>&xxe;</foo>
XML INSECURITY - 2
XML-RPC INSECURITY
Extreme Web Hacking
Análise passiva com Ratproxy
Explorando Web Resouces com w3af
Perguntas?
Referências