Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- SESSION 16
- ==========
- CSRF
- =====
- CSRF stands for Cross/Client Site Request Forgery. This is a Web Application attack where a attacker forces an end user to execute unwanted actions on a web application in which they're currently authenticated. They creates his/her own malicious links or pages to trigger and lure a victim and further misuse and steal there data for illegal purposes further leads to Identity Theft etc..
- Eg. already logged in inta a bank site and clicking on a ad on other malicious website stating "click here to win an iphone X" and is malicious.
- Demonstration on LVS and DVWA.
- --------------------------------------------------------------------------------------------------------------------------------------------------------------
- MISSING FUNCTION LEVEL ACCESS CONTROL
- =====================================
- Let us first understand what Access Control means.
- Access Control : access control is a process by which users are granted access and certain privileges to systems, resources or information. This term is usually derives for Authentication Checks.
- Most of the web applications verify function level access rights before making that functionality accessible to the user. Missing Function Level Access Control is one of the vulnerabilities on OWASP's Top 10 list and occurs when those authentication function checks are insufficient and attackers misuse them.
- Demonstration on LVS via Unrestricted User Access to the Admin Account.
- ---------------------------------------------------------------------------------------------------------------------------------------------------------------
- INVALIDATED REDIRECTS AND FORWARDS
- ===================================
- Most web applications on the internet frequently redirect and forward users to other pages or other external websites.
- Invallidated/Unvalidated redirects and forwards means redirecting a authenticated and valid user to a phishing or malicious web page which defines a malicious activity created by the attacker as using forwards to access unauthorized pages.
- How to find the redirecting value?
- There is a redirect_to="url" value in the Hyperlinks, this will signify that the URL is redirecting us to a particular malicious link.
- Demonstration on LVS of Manual Redirects and Automatic Redirects.
- ------------------------------------------------------------------------------------------------------------------------------------------------------------
- CWE
- ====
- Common Weakness Enumeration (CWE) is a universal online dictionary of weaknesses that have been found in computer software.The purpose of CWE is to facilitate the effective use of tools that can identify, find and resolve bugs, vulnerabilities and exposures in computer software before the programs are publicly distributed or sold.
- Website - https://cwe.mitre.org/
- ---------------------------------------------------------------------------------------------------------------------------------------------------------------
- Automated VAPT Tool - NETSPARKER
- ================================
- Netsparker is a web application security scanner, with support for both detection and exploitation of vulnerabilities. It is like Accunetix only, but more advanced and flexible in Report Generation and finding out Vulnerabilities.
- Demo Application - https://www.netsparker.com/web-vulnerability-scanner/download/
- Demonmstration of Report Generation and explanation on demo.testfire.net via Netsparker.
- ---------------------------------------------------------------------------------------------------------------------------------------------------------------
Add Comment
Please, Sign In to add comment
