Please enable JavaScript.

Coggle requires JavaScript to display documents.

CREST - 4 (Web Testing (Common SSL Vulnerabilities (Heartbleed (Buffer…

- - - - Buffer Overread
    - - Downgrade the TLS connection to an insecure one
    - - MitM
    - - RCE
    - - RC4 Vulnerability allowing sniffing of traffic
- - - - Improved version of X-XSS
    - - Prevents MIME Sniffing
    - - Prevents Clickjacking
    - - HTTP Public Key Pinning
    - - Secure
      - HTTPOnly
      - SameSite
        
        Prevents CSRF by preventing sending to another site
  - - - Rapid Web Application Development Platform
      - Connects HTML to DB
    - - server-side web application framework written in Ruby under the MIT License. Rails is a model–view–controller (MVC) framework, providing default structures for a database, a web service, and web pages.
  - - - standard protocol for web servers to execute programs that execute like console applications (also called command-line interface programs) running on a server that generates web pages dynamically
    - - DLL files that can be used to modify and enhance the functionality provided by IIS. ISAPI filters always run on an IIS server, filtering every request until they find one they need to process. The ability to examine and modify both incoming and outgoing streams of data makes ISAPI filters powerful and flexible.
    - - The modules allow for Apache to perform additional functions, such as natively rewriting URLs to support SSL encryption.
- - - - Brute Forcing
        
        sa account
      - SQL Server Process Manipulation Vulnerabilities
      - XP_CMDSHELL
  - - - SELECT * FROM V$VERSION
      - SELECT version FROM V$INSTANCE
      - BEGIN DBMS_OUTPUT.PUT_LINE(DBMS_DB_VERSION.VERSION || '.' || DBMS_DB_VERSION.RELEASE); END;
      - From Oracle TNS listener.
    - - opatch lsinventory
      - select * from registry$history;
      - cd $ORACLE_HOME/OPatch
        pwd
        /oracle/app/product/10.2.0/db_1/OPatch
    - - DBSNMP
        
        DBSNMP
      - SYSTEM
        
        MANAGER
      - OUTLN
        
        OUTLN
      - SCOTT
        
        TIGER
      - SYS
        
        CHANGEON INSTALL
  - - - internal user list maintained by the SQL Server compute
    - - through Windows NT accounts.