Resources

Exploits & Research

Exploiting LFI in Co-Hosting Environment

Local File Inclusion (LFI) vulnerability in a PHP web application can be exploited to the fullest whenever it is possible to upload files into the web server. This paper explores a technique through which a properly implemented file upload module in a co-hosted website can be used for full exploitation of the LFI vulnerability, which can lead to web server control.

Download : Exploiting LFI Using Co-hosted Web Applications

Security Threat Due to Proxy Cache

A recently observed behavior, involving a typical web caching proxy and a typical web application design implementation, has revealed that ignoring HTTP cache directives in a web application can have deadly serious consequences for an organization: What Happens When The Logout Page Is Cached in the Proxy Cache?

Download : Proxy_Cache_Security_Threat

File Upload Vulnerability in FCKEditor

Download : File Upload Vulnerability in FCKEditor

Source code disclosure over HTTP

Full source code disclosure is any website owner’s worst nightmare and any hacker’s dream. This paper explores a widely prevalent coding flaw in web applications which hackers can exploit to extract source code and configuration files over HTTP.

Download : Source code disclosure over HTTP

White Papers

XSS in Joomla Acajoom Component

XSS vulnerability has been detected in the popular ‘Acajoom’ component of Joomla. An attacker can hijack the Joomla’s super admin role user’s account by exploiting this weakness.

Download : XSS in Joomla Acajoom Component

Cross Site File Upload Forgery Mozilla Firefox 4

Mozilla Firefox 4 incorporates Cross Origin Resource Sharing, which is being espoused by the Web Application Working Group of W3C, through some significant changes in the XMLHttpRequest object. While these changes make mash-ups between applications more dynamic, they also make it possible upload files through Cross Site Request Forgery or the Click Jack attack.

Download : Cross Site File Upload Forgery Mozilla Firefox 4

Bypassing IIS 6 Access Restrictions

A vulnerability in IIS 6 web server, with WebDAV enabled, allows remote attackers to bypass built-in restrictions on accessing files with unknown MIME-types which often contain back end source codes.

Download : Bypassing IIS 6 Access Restrictions

Phishing through Base-64 Encoded Reflective HTML Injection

Through Phishing, an attacker steals critical information like user credentials, financial details, etc. from a victim. Phishing through a base-64 encoded reflective XSS vector is especially dangerous since the URL’s domain is genuine and the vector is hidden in a genuine looking string, which is the icing on the cake.

Download : Phishing through Base-64 Encoded Reflective HTML Injection

Exploiting Improper Redirection in PHP Web Applications

Accessing internal pages without authentication is a cracker’s dream come true. This paper discusses a widespread coding flaw in PHP web applications which makes the entire ‘behind-authentication’ module publicly accessible.

Download : Exploiting Improper Redirection in PHP Web Applications

Capture credentials via Browser Refresh

Improper implementation of cache control directives for an authentication based web application can have serious consequences for the application users. This paper aims to demonstrate this in a typical web application design implementation.

Download : Capture credentials via Browser Refresh