Monthly Archive: May 2016

This example using webgoat lab. You can download from: https://sourceforge.net/projects/owaspbwa/ Download tool  Jhijack from: http://yehg.net/lab/pr0js/files.php/jhijackv0.2beta.zip Blind Numberic SQL injection Response analysis If( true) return : Account number …

Summary The HTTP specification includes request other than the standard GET and POST request.A standards compliant web server may respond to these alternative methods in ways …