Tag Archives | php-hacking

CORE GRASP – PHP Web Application Protection Software

October 23, 2007 | 4,416 views

CORE GRASP for PHP is a web-application protection software aimed at detecting and blocking injection vulnerabilities and privacy violations. As mentioned during its presentation at Black Hat USA 2007, GRASP is being released as open source under the Apache 2.0 license. The present implementation protects PHP 5.2.3 against SQL-injection attacks for the MySQL engine, it […]

Shares 0

Tags: core, core grasp, grasp, mysql security, PHP, php-hacking, php-security, sql-injection, taint tracking, web-application-security

Posted in: Countermeasures, Security Software, Web Hacking | Add a Comment

SPIKE Proxy – Application Level Security Assessment

January 15, 2007 | 19,823 views

SPIKE Proxy is part of the SPIKE Application Testing Suite, It functions as an HTTP and HTTPS proxy, and allows the web developer or web application auditor low level access to the entire web application interface, while also providing a bevy of automated tools and techniques for discovering common problems. These automated tools include: Automated […]

Share3

Shares 3

Tags: asp-hacking, burp-proxy, cookies, php-hacking, proxies, proxy, spike, spike-proxy, Web Hacking, web-application-hacking, web-application-security, web-application-security-testing

Posted in: Hacking Tools, Network Hacking, Web Hacking | Add a Comment

The Top 10 PHP Security Vulnerabilities from OWASP

September 5, 2006 | 32,627 views

This is a useful article that has basically taken the OWASP Top 10 Vulnerabilities and remapped them to PHP with actual examples. The Open Web Application Security Project released a helpful document that lists what they think are the top ten security vulnerabilities in web applications. These vulnerabilities can, of course, exist in PHP applications. […]

Shares 0

Tags: darknet, owasp, owasp-top-10, php-exploits, php-hacking, php-vulnerabilities, top-10-vulnerabilities, Web Hacking

Posted in: Exploits/Vulnerabilities, Web Hacking | Add a Comment

Serious WordPress Vulnerability/Exploit Verion 2.0.3 and Below

July 27, 2006 | 17,196 views

Yes that means all versions including the current version and before, 2.0.4 has not yet been released at the current time. An exploit has been discovered in the current release of WordPress, affecting WordPress 2.0.3 and below (including 1.5.x) that allows these subscribed users to cause some serious damage. It’s recommended at present if you […]