APPLICATION PENETRATION TEST SUPER VEDA

More documents

Recommendations

Info

Application Penetration Test for Super Veda- Sample Report -APPENDIX A - READING THE ENTIRE DATABASECONTENTSshowproducts.asp_______________________________The attacker uses the 'Open in new window' option to open theshowproducts.asp page solely. Thus, having the ability to inject URLstrings to it.Learning that the Page is Vulnerable to SQLInjectionThe attacker tries to add the ' sign to the URL learning that the CatID ispart of an SQL statement.Adding the UNION SELECT QueryThe attacker changes the select query to include the UNION SELECTstatement.ImpervaPage36 of73
Application Penetration Test for Super Veda- Sample Report -Getting an error message stating that the number of columns doesn't matchthat of the beginning of the query makes the attacker start enumerating onthe number of fields.After a few cycles he reaches the correct number, getting the following error:ImpervaPage37 of73
Page 1 and 2: APPLICATION PENETRATION TESTSUPER V
Page 3 and 4: REFERENCESREF DOCUMENT VERSION DATE
Page 5 and 6: 5.6 Script Injection into User’s
Page 7 and 8: Application Penetration Test for Su
Page 35: Application Penetration Test for Su
Page 73: Application Penetration Test for Su

APPLICATION PENETRATION TEST SUPER VEDA

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?