The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

Rather than pursuing a full static disassembly of the component’s code, use

an intuitive GUI-based debugger to monitor and control its execution at run-

time. For example, OllyDbg is an accessible yet powerful debugger that can

be used to achieve many kinds of attacks on compiled software at runtime:

120

Chapter 5 

■

Bypassing Client-Side Controls

70779c05.qxd:WileyRed  9/16/07  5:14 PM  Page 120

---

HACK STEPS (continued)

■

Identify the methods exported by the control and its subcomponents,

and also any interesting operating system functions which the control

imports — in particular, any cryptographic functions. Set breakpoints on

these functions within the debugger.

■