目录
II
2.7. CONCURRENCY（并发）......................................................................................................................... 38
2.7.1. Thread Safety Problems（线程安全问题）................................................................................... 38
2.7.2. Shopping Cart Concurrency Flaw（购物并发漏洞）...................................................................39
2.8. CROSS-SITE SCRIPTING (XSS，跨站脚本攻击).....................................................................................40
2.8.1. Phishing with XSS（网络钓鱼与 XSS）.........................................................................................40
2.8.2. LAB: Cross Site Scripting（实验室：跨站脚本）........................................................................42
2.8.3. Stored XSS Attacks（存储式 XSS 攻击）....................................................................................... 45
2.8.4. Cross Site Request Forgery (CSRF)（跨站请求伪造）................................................................47
2.8.5. Reflected XSS Attacks（反射式 XSS 攻击）.................................................................................. 49
2.8.6. HTTPOnly Test（HTTPOnly 测试）...............................................................................................50
2.8.7. Cross Site Tracing (XST) Attacks（跨站跟踪攻击）.................................................................... 51
2.9. DENIAL OF SERVICE（拒绝服务）..........................................................................................................53
2.9.1. Denial of Service from Multiple Logins（由多个登录引起的拒绝服务）................................. 53
2.10. IMPROPER ERROR HANDLING（错误处理不当）................................................................................55
2.10.1. Fail Open Authentication Scheme（打开认证失败方案）.........................................................55
2.11. INJECTION FLAWS（注入漏洞）........................................................................................................... 57
2.11.1. Command Injection（命令注入）.................................................................................................57
2.11.2. Blind SQL Injection（SQL 盲注）................................................................................................ 59
2.11.3. Numeric SQL Injection（数字 SQL 注入）..................................................................................61
2.11.4. Log Spoofing（日志欺骗）........................................................................................................... 62
2.11.5. XPATH Injection（XPATH 注入）.................................................................................................63
2.11.6. LAB: SQL Injection（实验室：SQL 注入）................................................................................ 64
2.11.7. Database Backdoors（数据库后门）...........................................................................................69
2.12. INSECURE COMMUNICATION（通信安全）.......................................................................................... 70
2.12.1. Insecure Login（不安全的登录）................................................................................................ 70
2.13. INSECURE CONFIGURATION（不安全配置）........................................................................................71
2.13.1. Forced Browsing（强制浏览）.....................................................................................................71
2.14. INSECURE STORAGE（不安全的存储）............................................................................................... 72
2.14.1. Encoding Basics（基础编码）......................................................................................................72
2.15. PARAMETER TAMPERING（参数篡改）................................................................................................ 73
2.15.1. Exploit Hidden Fields（利用隐藏域）.........................................................................................73
2.15.2. Exploit Unchecked Email（利用未检查的电子邮件）.............................................................. 74
2.15.3. Bypass Client Side JavaScript Validation（绕过客户端 JavaScript 验证）.............................77
2.16. SESSION MANAGEMENT FLAWS（会话管理漏洞）............................................................................ 78
2.16.1. Hijack a Session（会话劫持）......................................................................................................78
2.16.2. Spoof an Authentication Cookie（身份验证 cookie 欺骗）....................................................... 81
2.16.3. Session Fixation（会话固定）......................................................................................................85
2.17. WEB SERVICES（WEB 服务）............................................................................................................... 89
2.17.1. Create a SOAP Request（创建一个 SOAP 请求）..................................................................... 89
2.17.2. WSDL Scanning（WSDL 扫描）...................................................................................................89
2.17.3. Web Service SAX Injection（Web 服务 SAX 注入）....................................................................89
W EB G OA T 使 用 手 册
