On Wednesday 3 October 2018 the Apache Software Foundation has released information about an Open Redirect vulnerability in Apache Struts 2. The vulnerability received identifier CVE-2018-11784. The vulnerability announcements describes the vulnerability as follows: When the default servlet returned a redirect to a …

Read More

In the Drupal security advisory that was released on August 19th, 2015 Drupal’s security team announced that it solved an SQL injection vulnerability in the Drupal database API.
The security advisory contained the following description of the SQL injection vulnerability: A vulnerability was found in the SQL comment …

Read More

Microsoft ASP.NET 4.5 and earlier versions contain a weakness in the Forms Authentication functionality whereby user sessions are not properly terminated when a user logs out of the session. As a result, users are vulnerable to session hijacking even after logging out of the web application.

This weakness isn’t new. …

Read More

When building your own Burp Suite extension, it can occur that compiling your code and creating the jar works find, but that you get the exception java.lang.ClassNotFoundException when loading your extention in Burp Suite. This article shows the solution to your problem. The reason is suite simple: Burp Suite expects …

Read More

Burp Suite allows you to easily write your own plugins, to perform complex and highly customized tasks within Burp. PortSwigger (the developer behind Burp Suite) created a series of blog posts wherein he explains what can be done with Burp Extensions. In his first blog post about the subject (see Writing your first …

Read More

Stompy is a fairly advanced entropy verifier for session cookies, XSRF tokens, OTPs, and other random data. It goes well beyond FIPS-140-2, performing n-dimensional spectral testing as well. What’s so cool about stompy? Stompy aims to be a quick and mostly automated tool to provide a first line of assessment and …

Read More

This page is mainly a checklist for myself to know how I have to customize a freshly downloaded version of Backtrack 4.

Change keyboard layout

Use the following command to change the keyboard layout:

dpkg-reconfigure console-setup

Accept all default, except changing the origin to Belgium (if you want to use be-latin1).

Update all packages

apt-get update apt-get upgrade

Configure SSH

You still have to generate your SSH keys

sshd-generate

Read More

This how-to explains you how to use SkipFish through a proxy. It will show you how you have to configure Burp Suite and which parameters you need to supply to SkipFish so that all SkipFish’s traffic will flow nicely through Burp Suite. Introduction What is SkipFish? Skipfish is an active web application security …

Read More

The following is a list of event handlers which can be used in HTML code to execute Javascript code. FSCommand(): attacker can use this when executed from within an embedded Flash object onAbort(): when user aborts the loading of an image onActivate(): when object is set as the active element onAfterPrint(): activates …

Read More

This article shows how you can use the WebScarab bean shell to modify requests and responses that are transmitted and received by WebScarab. Description of WebScarab taken from the OWASP WebScarab project website: “WebScarab is a framework for analysing applications that communicate using the HTTP and HTTPS protocols. …

Read More