Web Security Testing Cookbook

Index

A note on the digital index

A link in an index entry is displayed as the section title in which that entry appears. Because some sections have multiple index markers, it is not unusual for an entry to have several links to the same section. Clicking on any link will take you directly to the place in the text in which the marker appears.

Symbols

= (equal sign) in Base-64 encodings, Recognizing Base 64

# (hash sign) in URLs, Terminology, Discussion

% (percent sign) in URL encoding (see URL-encoded data)

' (single quote)

fetching web pages with cURL, Discussion

for SQL injection, SQL injection (see also SQL injection)

A

Accept headers, Discussion, Discussion

(see also request headers)

access manipulation

abusing password recovery, Problem

attempting privileged operations, Problem

brute-force guessing credentials, Problem–Discussion

bypassing required navigation, Discussion

common usernames and passwords, Discussion

cookie manipulation and, Solution (see also cookies)

cURL, denying access to, Discussion

directory traversal, Problem–Discussion

external JavaScript code, Problem–Discussion

finding authorization headers, Problem–Discussion

identifiers in AJAX responses, Discussion

impersonating other users, Problem

(see also impersonation)

LDAP injection, Problem–Discussion

password guessing, Discussion

predicting credentials, Problem–Discussion

restrictive functionality

abusing, Problem–Discussion

evading by changing sessions, Problem–Discussion

with URL parameters, Discussion

account lockouts (see lockouts)

ActivePerl ...