g1s16

SESSION 16
==========

CSRF
=====
CSRF stands for Cross/Client Site Request Forgery. This is a Web Application attack where a attacker forces an end user to execute unwanted actions on a web application in which they're currently authenticated. They creates his/her own malicious links or pages to trigger and lure a victim  and further misuse and steal there data for illegal purposes further leads to Identity Theft etc..


Eg. already logged in inta a bank site and clicking on a ad on other malicious website stating "click here to win an iphone X" and is malicious.

Demonstration on LVS and DVWA.

--------------------------------------------------------------------------------------------------------------------------------------------------------------

MISSING FUNCTION LEVEL ACCESS CONTROL
=====================================

Let us first understand what Access Control means.
Access Control : access control is a process by which users are granted access and certain privileges to systems, resources or information. This term is usually derives for Authentication Checks.

Most of the web applications verify function level access rights before making that functionality accessible to the user. Missing Function Level Access Control is one of the vulnerabilities on OWASP's Top 10 list and occurs when those authentication function checks are insufficient and attackers misuse them.

Demonstration on LVS via Unrestricted User Access to the Admin Account.

---------------------------------------------------------------------------------------------------------------------------------------------------------------

INVALIDATED REDIRECTS AND FORWARDS
===================================
Most web applications on the internet frequently redirect and forward users to other pages or other external websites.
Invallidated/Unvalidated redirects and forwards means redirecting a authenticated and valid user to a phishing or malicious web page which defines a malicious activity created by the attacker as using forwards to access unauthorized pages.

How to find the redirecting value?
There is a redirect_to="url" value in the Hyperlinks, this will signify that the URL is redirecting us to a particular malicious link.

Demonstration on LVS of Manual Redirects and Automatic Redirects.

----------------------------------------------------------------------------------------------------------------------