Download as PDF, PPTX
Uploaded byguest66dc5f
PDF, PPTX51,545 views
Shreeraj-Hacking_Web_2
This document summarizes a presentation on hacking Web 2.0 technologies and web services. The presentation discusses security concerns with Ajax, including attacks like cross-site scripting and request forgery. It also covers fingerprinting Ajax frameworks, vulnerabilities in Ajax data structures and serialization, and defenses like validating data and avoiding client-side logic. Regarding web services, the document outlines methods for discovery, profiling, and attacks like injection flaws and insecure direct object references. It emphasizes the need for code analysis and filtering input through an IHTTPModule firewall module.
![Hacking Web 2.0 - Defending Ajax and Web Services [HITB 2007 Dubai]](https://cdn.slidesharecdn.com/ss_thumbnails/hacking-web-20-defending-ajax-and-web-services-hitb-2007-dubai-25117-thumbnail.jpg?width=640&height=640&fit=bounds)
![[Infosecworld 08 Orlando] New Defenses for .NET Web Apps: IHttpModule in Prac...](https://cdn.slidesharecdn.com/ss_thumbnails/infosecworld-08-orlando-new-defenses-for-net-web-apps-ihttpmodule-in-practice-1205423616575296-3-thumbnail.jpg?width=640&height=640&fit=bounds)
