The Advantage of Heuristic Over Signature Based Web Vulnerability Scanners

There are two different kinds of web application vulnerability scanners; heuristic and signature based scanners. This article explains how both types of scanners work and what type of vulnerabilities they can find in web applications. How Do Signature ...

from The Advantage of Heuristic Over Signature Based Web Vulnerability Scanners

Open Redirection Vulnerability Information & Prevention

Introduction to the Remote File Inclusion A remote file inclusion (also known as RFI) occurs when a file from a remote server is included into a web page. Such behaviour can be developed on purpose on web applications, for example to show content ...

from Open Redirection Vulnerability Information & Prevention

Missing Function Level Access Control Vulnerabilities in Maian Support Helpdesk Allow Complete Take Over of the System

Missing Function Level Access Control vulnerabilities are listed as the 7th most popular vulnerabilities in the OWASP top 10 of 2013. You might have never heard the name before, but most probably you are familiar with the concept: If a user shouldn&rsq...

from Missing Function Level Access Control Vulnerabilities in Maian Support Helpdesk Allow Complete Take Over of the System

How Netsparker Hawk Finds SSRF and Out-of-Band Vulnerabilities

Netsparker Hawk is the new vulnerability testing infrastructure developed by Netsparker. It is used by the Netsparker web application security scanner to detect Server Side Request Forgery (SSRF) and all other kinds of blind, async and second order web...

from How Netsparker Hawk Finds SSRF and Out-of-Band Vulnerabilities

What is the Server Side Request Forgery Vulnerability & How to Prevent It?

Web applications can trigger inter-server requests, which are typically used to fetch remote resources such as software updates, or to import data from a URL or other web applications. While such inter-server requests are typically safe, unless impleme...

from What is the Server Side Request Forgery Vulnerability & How to Prevent It?