Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Vulnerabilidades em sistemas web

Avatar for Daniel Romero Daniel Romero
November 01, 2012
Programming
0
76

Vulnerabilidades em sistemas web

Algumas das vulnerabilidades mais exploradas em aplicações web.

Avatar for Daniel Romero

Daniel Romero

November 01, 2012
Tweet

More Decks by Daniel Romero

See All by Daniel Romero
Segurança on Rails
Avatar for Daniel Romero infoslack
0
100

Other Decks in Programming

See All in Programming
JJUG CCC 2025 Fall: Virtual Thread Deep Dive
Avatar for ternbusty ternbusty
3
480
生成AIを活用したリファクタリング実践 ~コードスメルをなくすためのアプローチ
Avatar for raedion raedion
0
110
「正規表現をつくる」をつくる / make "make regex"
Avatar for TSUYUSATO Kitsune makenowjust
1
740
関数の挙動書き換える
Avatar for takato fukui takatofukui
4
750
詳細の決定を遅らせつつ実装を早くする
Avatar for shimabox shimabox
2
1.3k
AI 時代だからこそ抑えたい「価値のある」PHP ユニットテストを書く技術 #phpconfuk / phpcon-fukuoka-2025
Avatar for shogogg shogogg
1
580
FlutterKaigi 2025 システム裏側
Avatar for Ryotaro Onoue yumnumm
0
1.2k
AI時代もSEOを頑張っている話
Avatar for しらはま shirahama_x
0
160
Private APIの呼び出し方
Avatar for Kishikawa Katsumi kishikawakatsumi
3
900
How Software Deployment tools have changed in the past 20 years
Avatar for Geshan Manandhar geshan
0
4.5k
「AWS CDK入門」の前日譚/Prequelto-Introduction-To-AWSCDK
Avatar for tyumugiko tyumugi1113
0
100
flutter_kaigi_2025.pdf
Avatar for Kyohei Ito kyoheig3
1
350

Featured

See All Featured
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
Avatar for Vitaly Friedman smashingmag
253
22k
Intergalactic Javascript Robots from Outer Space
Avatar for Vicent Martí tanoku
273
27k
The Pragmatic Product Professional
Avatar for Laura Van Doore lauravandoore
36
7k
Practical Orchestrator
Avatar for Shlomi Noach shlominoach
190
11k
The Straight Up "How To Draw Better" Workshop
Avatar for Dennis Kardys denniskardys
239
140k
Six Lessons from altMBA
Avatar for Skipper Chong Warson skipperchong
29
4.1k
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
Avatar for Rebecca Miller-Webster rmw
35
3.2k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
Avatar for Dan Newman danielanewman
231
22k
Being A Developer After 40
Avatar for Adrian Kosmaczewski akosma
91
590k
Designing Experiences People Love
Avatar for Jonathan Moore moore
142
24k
Speed Design
Avatar for Sergey Chernyshev sergeychernyshev
33
1.2k
The Art of Programming - Codeland 2020
Avatar for Erika Heidi erikaheidi
56
14k

Transcript

  1. Vulnerabilidades em sistemas web

  2. Primeiros passos • Vulnerabilidades • Técnicas • Ferramentas • OWASP

    • SDL

  3. Vulnerabilidades mais conhecidas • Injection • XSS • DdoS •

    Top 10 - https://www.owasp.org/index.php/Top_10_2010-Main

  4. SQL Injection • https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet • http://www.unixwiz.net/techtips/sql-injection.html

  5. XSS • https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet • http://hack.us/

  6. DDos • http://ha.ckers.org/slowloris/

  7. Ferramentas • http://sqlmap.org/ - GitHub • http://www.metasploit.com/ - GitHub •

    http://arachni-scanner.com/ - GitHub • http://brakemanscanner.org/ - GitHub • http://www.openvas.org/

  8. Prática, hora dos testes

  9. None

  10. Daniel Romero [email protected] @infolslack