Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Vulnerabilidades em sistemas web
Search
Daniel Romero
November 01, 2012
Programming
0
71
Vulnerabilidades em sistemas web
Algumas das vulnerabilidades mais exploradas em aplicações web.
Daniel Romero
November 01, 2012
Tweet
Share
More Decks by Daniel Romero
See All by Daniel Romero
Segurança on Rails
infoslack
0
89
Other Decks in Programming
See All in Programming
【YAPC::Hakodate 2024】TypeScriptエンジニアが感じたPerlのここが面白い
kimitashoichi
1
180
Quarto Clean Theme
nicetak
0
220
"noncopyable types" の使いどころについて考えてみた
andpad
0
160
2024-10-02 dev2next - Application Observability like you've never heard before
jonatan_ivanov
0
180
The Myth of the Modular Monolith - Day 2 Keynote - Rails World 2024
eileencodes
10
1.5k
モジュラモノリス、その前に / Modular monolith, before that
euglena1215
6
710
Introduce dRuby
ledsun
0
120
Cohesion in Modeling and Design
mploed
3
210
CSC509 Lecture 03
javiergs
PRO
0
140
Why I Choose NetBeans for Jakarta EE
ivargrimstad
0
190
文化が生産性を作る
jimpei
3
570
学生の時に開催したPerl入学式をきっかけにエンジニアが組織に馴染むために勉強会を主催や仲間と参加して職能間の境界を越えていく
ohmori_yusuke
1
140
Featured
See All Featured
jQuery: Nuts, Bolts and Bling
dougneiner
61
7.5k
RailsConf 2023
tenderlove
28
840
YesSQL, Process and Tooling at Scale
rocio
167
14k
Building Applications with DynamoDB
mza
90
6k
CSS Pre-Processors: Stylus, Less & Sass
bermonpainter
355
29k
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
43
6.5k
Fireside Chat
paigeccino
32
3k
Facilitating Awesome Meetings
lara
49
6k
Scaling GitHub
holman
458
140k
Thoughts on Productivity
jonyablonski
67
4.2k
4 Signs Your Business is Dying
shpigford
180
21k
In The Pink: A Labor of Love
frogandcode
139
22k
Transcript
Vulnerabilidades em sistemas web
Primeiros passos • Vulnerabilidades • Técnicas • Ferramentas • OWASP
• SDL
Vulnerabilidades mais conhecidas • Injection • XSS • DdoS •
Top 10 - https://www.owasp.org/index.php/Top_10_2010-Main
SQL Injection • https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet • http://www.unixwiz.net/techtips/sql-injection.html
XSS • https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet • http://hack.us/
DDos • http://ha.ckers.org/slowloris/
Ferramentas • http://sqlmap.org/ - GitHub • http://www.metasploit.com/ - GitHub •
http://arachni-scanner.com/ - GitHub • http://brakemanscanner.org/ - GitHub • http://www.openvas.org/
Prática, hora dos testes
None
Daniel Romero
[email protected]
@infolslack