The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

application. Ascertain whether the application processes arbitrary values

submitted in the parameter, and whether this exposes the application to

any vulnerabilities.

Opaque Data

Sometimes, data transmitted via the client is not transparently intelligible,

because it has been encrypted or obfuscated in some way. For example, instead

of seeing a product’s price stored in a hidden field, you may see some cryptic

value being transmitted:

Product: Sony VAIO A217S

Quantity:

265772031383932654448a352484634667233683277384f2245556533327233666455225

242452a526674696f6471”>