owasp security testing

Today, because of the project background, it is necessary to detect the Web interface for some security risks.But has never mastered the knowledge of systematic permeability, had to do some exploration according to the personal understanding of the network protocol and the Web, finally found a session fixation attacks loophole.Scene review:Using the capture tool to monitor the login log out interface of the business, found that after the login Jsessio

Learning Android Application Security Testing from scratch (Part3)In this section, we will look at how to conduct attack tests on components in Android applications. Read the first two sections ( http://www.bkjia.com/Article/201504/388673.html , http://www.bkjia.com/Article/201504/388674.html ) Before that, you understand where the components in Android apps are sacred. Android components constitute the bas

program. such as pre-Leadbbs, only the background of the cookie verification strictly, the location of the foreground is only from the cookie to read the user ID, the user is not legal at all not verified.Test:It is recommended to use the Mybrower browser to instantly display and modify cookies. Try modifying the corresponding position inside.Vulnerability in local submission formPrinciple:The action only has the submit of the love form, so the form is the interface of the customer Web program.