Search Results

untitled_design__34_49zldCHdRKCC7F6XZdXEf4tAJKrNGMszXPMvZJQB

access_control

Access control RFI & Reading file function exploitation + reverse shell with Mutillidae and BurpSuite

by Vry4n_ | Jan 19, 2020 | Web Exploitation

This time we will be exploring RFI and read file explorer https://wiki.owasp.org/index.php/Testing_for_Remote_File_Inclusion RFI Remote file inclusion allows an attacker to include file remote (from the web servers point of view) possibly allowing code execution,...

Access control: Account highjacking with Mutillidae

by Vry4n_ | Jan 18, 2020 | Web Exploitation

This happens when a cyber-criminal controls somebody else’s account by using credentials (session ID, username number, etc.) In this example I will demonstrate this technique using Mutillidae, we’ll create 2 accounts and highjack it. OWASP 2017 - “A5 - Broken Access...