The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

Where an action is carried out in a multistep way, involving several dif-

ferent requests from client to server, test each request individually to

determine whether access controls have been applied to it.

■

Try to find any locations where the application is effectively assuming that

if you have reached a particular point, then you must have arrived via legiti-

mate means. Try to reach that point in other ways using a lower-privileged

account, to detect if any privilege escalation attacks are possible.

In cases where static resources that the application is protecting are ulti-

mately accessed directly via URLs to the resource files themselves, you should

test whether it is possible for unauthorized users to simply request these URLs

directly. 

HACK STEPS

■

Step through the normal process for gaining access to a protected static