Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Vulnerabilidades em sistemas web

Avatar for Daniel Romero Daniel Romero
November 01, 2012
Programming
86
0

Vulnerabilidades em sistemas web

Algumas das vulnerabilidades mais exploradas em aplicações web.

Avatar for Daniel Romero

Daniel Romero

November 01, 2012

More Decks by Daniel Romero

See All by Daniel Romero
Segurança on Rails
Avatar for Daniel Romero infoslack
0
140

Other Decks in Programming

See All in Programming
LLM 101
Avatar for Leonardo YongUk Kim dalinaum
0
470
オーケストレーション記述言語 Katari
Avatar for ゆきくらげ yukikurage
0
230
[DroidKnights 2026] Workflow AX: From Auto-Documented Policies to E2E Testing
Avatar for raeminKang raeminkang
0
530
Snowflake Openflow Connector利用の勘所 / 20261024developersio2026tokyo-snowflake-openflow
Avatar for kasacchiful kasacchiful
PRO
0
300
はじめてのPLATEAU
Avatar for nokonoko1203 nokonoko1203
1
560
ActionController meets Protocol Buffers
Avatar for Sorah Fukumori sorah
1
780
AI時代のFlutter品質設計 — アプリ品質を守るQuality Layers
Avatar for omatty198 omatty198
0
360
そのデザイントークン、Flutterでも同じ見た目になりますか？
Avatar for nakamizu nakamizu
0
310
AmebaブログはKMPから卒業します
Avatar for 伊藤光次郎 kmars0605
0
320
AI Augmentation Techniques with Liberty
Avatar for ivargrimstad ivargrimstad
1
380
Goコンパイラを作ってGoをもっと理解する / Build a Go compiler to better understand Go
Avatar for ikura-hamu ikura_hamu
0
120
AIが生成したコードは読むべきか？抽象化設計とコードの品質保証 / abstraction-design-and-quality
Avatar for MinoDriven minodriven
16
8.7k

Featured

See All Featured
10 Git Anti Patterns You Should be Aware of
Avatar for Lemi Orhan Ergin lemiorhan
PRO
659
62k
The Invisible Side of Design
Avatar for Vitaly Friedman smashingmag
301
52k
Tell your own story through comics
Avatar for letsgokoyo letsgokoyo
1
1.1k
Deep Space Network (abreviated)
Avatar for Tony Rice tonyrice
0
410
Mind Mapping
Avatar for Hélio Medeiros helmedeiros
1
430
[RailsConf 2023] Rails as a piece of cake
Avatar for Vladimir Dementyev palkan
59
7.1k
Design in an AI World
Avatar for tapps tapps
1
380
Stop Working from a Prison Cell
Avatar for Chris Michel hatefulcrawdad
274
21k
jQuery: Nuts, Bolts and Bling
Avatar for Doug Neiner dougneiner
66
8.7k
Designing Powerful Visuals for Engaging Learning
Avatar for Mike Taylor tmiket
1
650
Claude Code のすすめ
Avatar for schroneko schroneko
67
230k
Speed Design
Avatar for Sergey Chernyshev sergeychernyshev
33
2.2k

Transcript

  1. Vulnerabilidades em sistemas web

  2. Primeiros passos • Vulnerabilidades • Técnicas • Ferramentas • OWASP

    • SDL

  3. Vulnerabilidades mais conhecidas • Injection • XSS • DdoS •

    Top 10 - https://www.owasp.org/index.php/Top_10_2010-Main

  4. SQL Injection • https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet • http://www.unixwiz.net/techtips/sql-injection.html

  5. XSS • https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet • http://hack.us/

  6. DDos • http://ha.ckers.org/slowloris/

  7. Ferramentas • http://sqlmap.org/ - GitHub • http://www.metasploit.com/ - GitHub •

    http://arachni-scanner.com/ - GitHub • http://brakemanscanner.org/ - GitHub • http://www.openvas.org/

  8. Prática, hora dos testes

  9. None

  10. Daniel Romero [email protected] @infolslack