
21.07.2010, 04:12
|
|
Guest
Сообщений: n/a
Провел на форуме: 12258
Репутация:
0
|
|
http://google-gruyere.appspot.com/
Список типов уязвимостей :
Сообщение от None
* Beat the hackers
* Gruyere
* Set-up
o Reset Button
o About the Code
o Features and Technologies
* Using Gruyere
* Cross-Site Scripting (XSS)
o XSS Challenges
o File Upload XSS
o Reflected XSS
o Stored XSS
o Stored XSS via HTML Attribute
o Stored XSS via AJAX
o Reflected XSS via AJAX
o More about XSS
* Client-State Manipulation
o Elevation of Privilege
o Cookie Manipulation
* Cross-Site Request Forgery (XSRF)
o XSRF Challenge
o More about preventing XSRF
* Cross Site Script Inclusion (XSSI)
o XSSI Challenge
* Path Traversal
o Information disclosure via path traversal
o Data tampering via path traversal
* Denial of Service
o DoS - Quit the Server
o DoS - Overloading the Server
o More on Denial of Service
* Code Execution
o Code Execution Challenge
o More on Remote Code Execution
* Configuration Vulnerabilities
o Information disclosure #1
o Information disclosure #2
o Information disclosure #3
* AJAX vulnerabilities
o DoS via AJAX
o Phishing via AJAX
* Other Vulnerabilities
o Buffer Overflow and Integer Overflow
o SQL Injection
* After the Codelab
|
|
|
|