EECS 354 Network Security - Network Penetration and Security
EECS 354 Network Security - Network Penetration and Security
EECS 354 Network Security - Network Penetration and Security
SHOW LESS
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Friday, October 22, 2010<br />
Fail to Restrict URLs<br />
• Main app: http://example.com/myapp.php<br />
• Helper script: http://example.com/helper.php<br />
• Maybe a backup script http://example.com/backup.php<br />
• Prints diffs for backup purposes, logging, etc.<br />
• Navigate to helper.php<br />
• (?????)<br />
• Profit
Change language