The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

Chapter 4 

■

Mapping the Application

91

70779c04.qxd:WileyRed  9/14/07  3:12 PM  Page 91

---

■■

User impersonation functions — Privilege escalation.

■■

Use of cleartext communications — Session hijacking, capture of cre-

dentials and other sensitive data.

■■

Off-site links — Leakage of query string parameters in the 

Referer

header.

■■

Interfaces to external systems — Shortcuts in handling of sessions

and/or access controls.

■■

Error messages — Information leakage.

■■

Email interaction — Email and/or command injection.

■■

Native code components or interaction — Buffer overflows.

■■

Use of third-party application components — Known vulnerabilities.

■■

Identifiable web server software — Common configuration weak-

nesses, known software bugs.

HACK STEPS

■