111 lines
4.3 KiB
HTML
111 lines
4.3 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>webAppHacking | Kitaab</title>
|
|
<meta property="og:title" content="webAppHacking | Kitaab">
|
|
<meta property="og:type" content="website">
|
|
<meta property="og:description"
|
|
content="config.site_meta_description">
|
|
<meta property="og:site_name" content="Kitaab">
|
|
<meta property="og:url" content="build_url">
|
|
<meta property="og:image" content="build_urlassets/social.png">
|
|
<meta property="og:image:height" content="300">
|
|
<meta property="og:image:width" content="300">
|
|
<meta property="og:image:type" content="image/jpeg">
|
|
<link rel="stylesheet" href="asset/style.css" type="text/css"
|
|
media="screen" title="no title" charset="utf-8">
|
|
<!-- Mastodon stuff should go here
|
|
<meta name="twitter:site" content="config.twitter_name">
|
|
<meta name="twitter:title" content="page_title | config.name_of_site">
|
|
<meta name="twitter:image" content="build_urlassets/social.png">
|
|
<meta name="twitter:image:alt" content="page_title | config.name_of_site">
|
|
--!>
|
|
<link rel="apple-touch-icon" sizes="57x57" href="build_urlassets/apple-icon-57x57.png">
|
|
<link rel="apple-touch-icon" sizes="60x60" href="build_urlassets/apple-icon-60x60.png">
|
|
<link rel="apple-touch-icon" sizes="72x72" href="build_urlassets/apple-icon-72x72.png">
|
|
<link rel="apple-touch-icon" sizes="76x76" href="build_urlassets/apple-icon-76x76.png">
|
|
<link rel="apple-touch-icon" sizes="114x114" href="build_urlassets/apple-icon-114x114.png">
|
|
<link rel="apple-touch-icon" sizes="120x120" href="build_urlassets/apple-icon-120x120.png">
|
|
<link rel="apple-touch-icon" sizes="144x144" href="build_urlassets/apple-icon-144x144.png">
|
|
<link rel="apple-touch-icon" sizes="152x152" href="build_urlassets/apple-icon-152x152.png">
|
|
<link rel="apple-touch-icon" sizes="180x180" href="build_urlassets/apple-icon-180x180.png">
|
|
<link rel="icon" type="image/png" sizes="192x192" href="build_urlassets/android-icon-192x192.png">
|
|
<link rel="icon" type="image/png" sizes="32x32" href="build_urlassets/favicon-32x32.png">
|
|
<link rel="icon" type="image/png" sizes="96x96" href="build_urlassets/favicon-96x96.png">
|
|
<link rel="icon" type="image/png" sizes="16x16" href="build_urlassets/favicon-16x16.png">
|
|
<meta name="msapplication-TileColor" content="#5927e0">
|
|
<meta name="msapplication-TileImage" content="build_urlassets/ms-icon-144x144.png">
|
|
<meta name="theme-color" content="#5927e0">
|
|
<link rel="canonical" href="Raw">
|
|
<link rel="stylesheet" href="assets/main.css">
|
|
</head>
|
|
|
|
<body class="flow-large container">
|
|
<header>
|
|
<a style='display:flex;padding-top:10px' href="home.html" aria-label="Kitaab">Kitaab</a>
|
|
</header>
|
|
<main>
|
|
<div id='navigation' style="float: right;">
|
|
<nav>
|
|
<h2> <a href='tag_index.html'> Index </a> </h2>
|
|
<ul>
|
|
<li> <a href='recents.html'>recents</a></li>
|
|
|
|
<li> <a href='dev_index.html'>dev</a></li>
|
|
|
|
<li> <a href='way_index.html'>way</a></li>
|
|
|
|
<li> <a href='recipe_index.html'>recipe</a></li>
|
|
|
|
<li> <a href='ops_index.html'>ops</a></li>
|
|
|
|
<li> <a href='blog_index.html'>blog</a></li>
|
|
|
|
<li> <a href='rock_index.html'>rock</a></li>
|
|
|
|
<li> <a href='phil_index.html'>phil</a></li>
|
|
|
|
<li> <a href='story_index.html'>story</a></li>
|
|
|
|
<li> <a href='blog_index.html'>blog</a></li>
|
|
|
|
<li> <a href='untagged_index.html'>untagged</a></li>
|
|
|
|
</ul>
|
|
</nav>
|
|
</div>
|
|
<h1> webAppHacking </h1>
|
|
<div style='max-width:660px;'>
|
|
<article class="flow">
|
|
|
|
|
|
<a href="hack_index.html">
|
|
hack
|
|
</a>
|
|
|
|
|
|
|
|
<date>1970-01-01 10:00</date>
|
|
|
|
<p>The difference between Broken Authention and Broken Access controls is that authentication allows you to assume someone else's identity or account, where as the access controls allow you to access things you shouldn't be able to under your current identity.</p>
|
|
<h3>Top 10 insecurities</h3>
|
|
<p>Injections
|
|
Cross Site Scripting (<a href='XSS.html' >XSS</a>)
|
|
XML External Entities (XEE)
|
|
Broken Authentication
|
|
Broken Access Controls
|
|
Security Misconfiguration
|
|
Insecure Deserialization
|
|
Using components with Known Vulns
|
|
Sensitive Data Exposure
|
|
Insufficient Logging</p>
|
|
|
|
</article>
|
|
</div>
|
|
</main>
|
|
</body>
|
|
|
|
</html> |