Download as PDF, PPTX
![Testing for SQL Wildcard Attacks
SELECT * FROM Article WHERE Content LIKE '%foo%'
SELECT TOP 10 * FROM Article WHERE Content LIKE
'%_[^!_%/%a?F%_D)_(F%)_%([)({}%){()}£$&N%_)$*£()
$*R"_)][%](%[x])%a][$*"£$-9]_%'](https://image.slidesharecdn.com/webapplicationsecuritytesting-130607074438-phpapp02/75/Web-application-security-Testing-32-2048.jpg)
Uploaded byDeepu S Nath
Web application security & Testing
This document summarizes web application security testing. It discusses understanding how web applications work and common security risks. It then outlines the main steps of a security test: information gathering, configuration management testing, authentication testing, authorization testing, business logic testing, data validation testing, and denial of service testing. Specific techniques are provided for each step like using tools like Nikto, ZAP, and Hydra or manually testing authentication, injections, error handling, and more.
In this document
Powered by AI
Overview of web application security and presenter introduction.
Key focuses include understanding security, testing methods, and risk mitigation.
Outlines various types of security testing including authentication and data validation.
Factors in information gathering with tools for discovering application entry points.
Emphasizes SSL testing and configuration management, identifying outdated files.
Examines methods for testing user authentication and identifying vulnerabilities.
Focus on testing user privileges and business logic flaws in applications.
Development of testing strategies for data validation and various injection types.
Discusses techniques for testing against DoS attacks and protection methods.
Introduction to various open source tools available for security testing.
Engagement with audience through questions regarding presentation content.
More Related Content
Similar to Web application security & Testing
![[BDD 2025 - Mobile Development] Mobile Engineer and Software Engineer: Are we...](https://cdn.slidesharecdn.com/ss_thumbnails/md-mobileengineerandsoftwareengineerarewestillrelevantsidiqpermana-251127010650-55224ef1-thumbnail.jpg?width=640&height=640&fit=bounds)
![[BDD 2025 - Artificial Intelligence] Building AI Systems That Users (and Comp...](https://cdn.slidesharecdn.com/ss_thumbnails/ai-buildingaisystemsthatusersandcompanieslove-251124030845-038f7732-thumbnail.jpg?width=640&height=640&fit=bounds)
![[BDD 2025 - Mobile Development] Crafting Immersive UI with E2E and AGSL Shade...](https://cdn.slidesharecdn.com/ss_thumbnails/md-craftingimmersiveuiwithe2eandagslshaderveronicaputrianggraini-251124030840-0c677f44-thumbnail.jpg?width=640&height=640&fit=bounds)
Web application security & Testing
- 1. Web Application Security SreenathSasikumar QBurst
- 2. Who am I? www.MakeMeResume.com/@sreenath
- 3. Take Away • Understandingweb application security • How to security test web applications • Mitigating web application security risks • Open source tools
- 4.
- 5.
- 6. Security testing webapplications • Information Gathering • Configuration Management Testing • Authentication Testing • Session Management Testing • Authorization Testing • Business Logic Testing • Data Validation Testing • Denial of Service Testing
- 7.
- 8.
- 9. Search Engine Discovery GoogleHacking • site • cache • inurl • filetype How to: Manual HackSearch
- 10. Identify Application Entrypoints • GET • POST • Cookies • Server Parameters • Files How to: Tamper Data, WebScarab, ZAP
- 11. Web Application Fingerprinting Howto: Nikto Vulnerability Scanners
- 12. Application Discovery Different BaseURL • www.example.com/abc Different port • www.example.com:8000 Different sub domain ( Virtual host ) • abc.example.com How to: Zap, WebSlayer
- 13.
- 14.
- 15. SSL Testing Identify sslports and services How strong is you cipher? How to: Nmap -sV, Nessus, OpenSSL
- 16. Configuration Management Testing • Infrastructure Configuration Management • Application Configuration Management
- 17. Old, Backup &Unreferenced Files User-agent: * Disallow: /Admin Disallow: /uploads Disallow: /backup Disallow: /~jbloggs How to: HackSearch, Webslayer
- 18. Testing for HTTPMethods • HEAD • GET • POST • PUT • DELETE • TRACE • OPTIONS • CONNECT How to: Netcat Nikto
- 19.
- 20. Credentials transport overan encrypted channel Prevent man in the middle attack
- 21. Testing for userenumeration Error Messages/Notifications "Sorry, please enter a valid password" "Sorry, please enter a valid username" "Sorry, this user does not exist" "Sorry, this user is no longer active"
- 22. Testing for GuessableUsers & BruteForce Attacks How to: John the Ripper Hydra
- 23.
- 24. Testing Session &Cookies
- 25.
- 26. Testing for privilegeescalation • vertical escalation • horizontal escalation www.example.com/?user=1&groupID=2
- 27.
- 28.
- 29.
- 30. • SQL Injection • XSS Injection • LDAP Injection • XML Injection • HTML Injection • SSI Injection • ORM Injection • XPath Injection • IMAP/SMTP Injection • Buffer Overflow
- 31. Testing for Denialof Service
- 32. Testing for SQLWildcard Attacks SELECT * FROM Article WHERE Content LIKE '%foo%' SELECT TOP 10 * FROM Article WHERE Content LIKE '%_[^!_%/%a?F%_D)_(F%)_%([)({}%){()}£$&N%_)$*£() $*R"_)][%](%[x])%a][$*"£$-9]_%'
- 33. Testing for DoSLocking Customer Accounts
- 34. Open Source Tools Nikto Nessus W3AF ZAP WebSlayer Netcat Nmap Skipfish Hydra MozillaFirefox addons Lots & lots more...
- 35. PenQ - Securitytesting browser
- 36.