Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Vulnerabilidades em sistemas web

Daniel Romero
November 01, 2012
Programming
0
71

Vulnerabilidades em sistemas web

Algumas das vulnerabilidades mais exploradas em aplicações web.

Daniel Romero

November 01, 2012
Tweet

More Decks by Daniel Romero

See All by Daniel Romero
Segurança on Rails
infoslack
0
89

Other Decks in Programming

See All in Programming
【YAPC::Hakodate 2024】TypeScriptエンジニアが感じたPerlのここが面白い
kimitashoichi
1
180
Quarto Clean Theme
nicetak
0
220
"noncopyable types" の使いどころについて考えてみた
andpad
0
160
2024-10-02 dev2next - Application Observability like you've never heard before
jonatan_ivanov
0
180
The Myth of the Modular Monolith - Day 2 Keynote - Rails World 2024
eileencodes
10
1.5k
モジュラモノリス、その前に / Modular monolith, before that
euglena1215
6
710
Introduce dRuby
ledsun
0
120
Cohesion in Modeling and Design
mploed
3
210
CSC509 Lecture 03
javiergs
PRO
0
140
Why I Choose NetBeans for Jakarta EE
ivargrimstad
0
190
文化が生産性を作る
jimpei
3
570
学生の時に開催したPerl入学式をきっかけにエンジニアが組織に馴染むために勉強会を主催や仲間と参加して職能間の境界を越えていく
ohmori_yusuke
1
140

Featured

See All Featured
jQuery: Nuts, Bolts and Bling
dougneiner
61
7.5k
RailsConf 2023
tenderlove
28
840
YesSQL, Process and Tooling at Scale
rocio
167
14k
Building Applications with DynamoDB
mza
90
6k
CSS Pre-Processors: Stylus, Less & Sass
bermonpainter
355
29k
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
43
6.5k
Fireside Chat
paigeccino
32
3k
Facilitating Awesome Meetings
lara
49
6k
Scaling GitHub
holman
458
140k
Thoughts on Productivity
jonyablonski
67
4.2k
4 Signs Your Business is Dying
shpigford
180
21k
In The Pink: A Labor of Love
frogandcode
139
22k

Transcript

  1. Vulnerabilidades em sistemas web

  2. Primeiros passos • Vulnerabilidades • Técnicas • Ferramentas • OWASP

    • SDL

  3. Vulnerabilidades mais conhecidas • Injection • XSS • DdoS •

    Top 10 - https://www.owasp.org/index.php/Top_10_2010-Main

  4. SQL Injection • https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet • http://www.unixwiz.net/techtips/sql-injection.html

  5. XSS • https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet • http://hack.us/

  6. DDos • http://ha.ckers.org/slowloris/

  7. Ferramentas • http://sqlmap.org/ - GitHub • http://www.metasploit.com/ - GitHub •

    http://arachni-scanner.com/ - GitHub • http://brakemanscanner.org/ - GitHub • http://www.openvas.org/

  8. Prática, hora dos testes

  9. None

  10. Daniel Romero [email protected] @infolslack