Save 37% off PRO during our Black Friday Sale! »

Vulnerabilidades em sistemas web

00e25f01471e24fa104046f4eee0ed90?s=47 Daniel Romero
November 01, 2012
Programming
0
64

Vulnerabilidades em sistemas web

Algumas das vulnerabilidades mais exploradas em aplicações web.

00e25f01471e24fa104046f4eee0ed90?s=128

Daniel Romero

November 01, 2012
Tweet

More Decks by Daniel Romero

See All by Daniel Romero
00e25f01471e24fa104046f4eee0ed90?s=48 infoslack
0
62

Other Decks in Programming

See All in Programming
52cc8a838bf44a589d2572833b2dd1b9?s=48 palkan
2
130
Dbab5e5a1fd54531e1119ede6b3b9e65?s=48 horie1024
3
2.7k
44a210d1299a727e9d601a47dfedeabf?s=48 mot_techtalk
0
150
6b8e2101579190ad96e747e01c279898?s=48 pauloxnet
1
140
7afaad8f870ef79e2c3284a91e13f0b3?s=48 nakabonne
1
260
8f4b861a5b83575337b98d144a4ef4ca?s=48 psadauskas
0
200
0157a830bfaa0c5426422c45aa0b2637?s=48 bo0km4n
2
420
575ca492bac55e895d0e1c86f7d709fe?s=48 hschwentner
2
690
8a70cbe9a1cb32f9e2286dc1bcf0f3f7?s=48 mimimimizuki
0
530
2a195253a39691fe82d2f1b9d4dadb36?s=48 champon1020
0
520
587223eccffb4d264fd18bb9d54cd1d9?s=48 webdevwithmatt
0
290
C832fe4470555df3cf7ac6fa2f389261?s=48 tak_iwamoto
2
1.3k

Featured

See All Featured
C1daf20e5c49ff910745198ef9869ac2?s=48 hatefulcrawdad
256
17k
A0517b08532aec8ab2aae3f65d40ad86?s=48 hannesfritz
32
1.2k
F68cb25ae3e5c2106997454b13b7737d?s=48 brad_frost
163
6.9k
9375a9529679f1b42b567a640d775e7d?s=48 schacon
152
6.9k
1177e050db6bafe62885362edf6e3537?s=48 lauravandoore
443
29k
1b75d89772b7eea1f6c89fbf362607d9?s=48 moore
129
22k
C51b39fa3c79ccb99dcb8a076bc98287?s=48 brianwarren
88
5.3k
20bfe76b3d6105641f879fe45cfc9272?s=48 bkeepers
PRO
324
54k
245cee81a9c424266e5e401d844ea881?s=48 lara
27
3.5k
32de0bd2ba869609d26fd052a4622778?s=48 cromwellryan
107
6.6k
3ab1249be442027903e1180025340b3f?s=48 reverentgeek
37
2.9k
1519587b1a0febb658c36c94f6272b0d?s=48 roundedbygravity
85
8.2k

Transcript

  1. Vulnerabilidades em sistemas web

  2. Primeiros passos • Vulnerabilidades • Técnicas • Ferramentas • OWASP

    • SDL

  3. Vulnerabilidades mais conhecidas • Injection • XSS • DdoS •

    Top 10 - https://www.owasp.org/index.php/Top_10_2010-Main

  4. SQL Injection • https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet • http://www.unixwiz.net/techtips/sql-injection.html

  5. XSS • https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet • http://hack.us/

  6. DDos • http://ha.ckers.org/slowloris/

  7. Ferramentas • http://sqlmap.org/ - GitHub • http://www.metasploit.com/ - GitHub •

    http://arachni-scanner.com/ - GitHub • http://brakemanscanner.org/ - GitHub • http://www.openvas.org/

  8. Prática, hora dos testes

  9. None

  10. Daniel Romero infoslack@gmail.com @infolslack