Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
OWASP Top 10 Overview
Search
evandentremont
December 17, 2020
Programming
0
33
OWASP Top 10 Overview
evandentremont
December 17, 2020
Tweet
Share
More Decks by evandentremont
See All by evandentremont
1,2,3,4 I Declare Cyber War
evandentremont
2
900
Fixing Infosec
evandentremont
0
89
BTC: Currency or Commodity?
evandentremont
0
76
Immunizing IoT
evandentremont
0
60
Defeating Next Gen Firewalls
evandentremont
1
61
Next Gen Botnet C&C
evandentremont
0
66
SQLi Injection attacks & mitigation
evandentremont
0
73
Other Decks in Programming
See All in Programming
CSC307 Lecture 10
javiergs
PRO
0
310
スクラムマスターって孤独じゃないですか?
yoshitaroyoyo
1
140
APIのない大学ログインWebサービスをWKWebViewとJavaScriptでアプリ化した話
akidon0000
1
330
ぼっちを避けて楽しむためのアノテコノテ / Various Tips and Tricks to Avoid Loneliness and Have Fun
nrslib
3
1.7k
AWSでゲームサーバーを運用! Amazon GameLiftのお話
iriikeita
0
200
Ruby メモリ管理 プログラミング
megmogmog1965
0
130
Xcode 16のPreviewModifierと@Previewableを活用した効率的なプレビュー方法の考察
ojun9
2
160
社内 LT 会を発足し、アウトプット文化を醸成させるために考えたこと・やったこと / Starting internal LT meetings and fostering an output culture
mackey0225
3
120
CSC307 Lecture 06
javiergs
PRO
0
360
The rollercoaster of releasing an Android, iOS, and macOS app with Kotlin Multiplatform | droidcon Berlin
prof18
0
110
継続的な活動で築く地方エンジニアの道
myamashii
2
360
「2024年版 Kotlin サーバーサイドプログラミング実践開発」の補講 〜O/Rマッパー編〜
n_takehata
2
260
Featured
See All Featured
It's Worth the Effort
3n
181
27k
The MySQL Ecosystem @ GitHub 2015
samlambert
248
12k
Intergalactic Javascript Robots from Outer Space
tanoku
266
26k
How to name files
jennybc
67
96k
A Tale of Four Properties
chriscoyier
155
22k
JavaScript: Past, Present, and Future - NDC Porto 2020
reverentgeek
44
4.7k
Easily Structure & Communicate Ideas using Wireframe
afnizarnur
189
16k
Helping Users Find Their Own Way: Creating Modern Search Experiences
danielanewman
26
2.1k
Docker and Python
trallard
37
2.9k
Scaling GitHub
holman
458
140k
The Brand Is Dead. Long Live the Brand.
mthomps
52
36k
Documentation Writing (for coders)
carmenintech
63
4.2k
Transcript
None
• • •
• • • • • • • • • •
• • • • • • • • • •
• • • • • • • • • •
• • • • • • • • • •
• • • • • • • • • •
• • • • • • • • • •
• • • • • • • • • •
• • • • • • • • • •
• • • • • • • • • •
• • • • • • • • • •
• • • • • • • • • •
None
• • • •
None
• • •
None
None
<?php class file { public $file = “file.txt” public $data
= “some text” function __destruct(){ file_put_contents($this->file, $this->data); } } O:3{:”file”:2:{s:4:”file”;s:12:”file.txt”;s:4:”data”;s:9:”some text”};}
O:3{:”file”:2:{s:4:”file”;s:9:”shell.php”;s:8:”<?php ?>”;s:9:”some text”};} <?php file_put_contents(”shell.php”, “<?php ?>”); ?>
• • • •
None
None
• • • •
• – <script>X</script>, <!--X-->, <div X=”y”>, <X></X>, <style>X</style> • –
<div attr=X>, <div attr=”X”>, <div attr=’X’> • – <script>alert(‘X’), data=’X’, <div onClick=”data=’X’” – selector { property:X;}, <span style=”property:X;”>
None
None
None
• • • •
None
None
• • • • • • •
None
None
None
• • • •
None
• • • • • • •
None
• – • – • –
• – • – • –
• • • • •
None
• • – – •
• • • • • •
None
• • •
None