家庭小木屋

家是什么?众说纷纭。社会学家说,家是社会的最小细胞;婚姻学家说,家是风雨相依的两人世界;文学家说,家是宝盖下面养着的一群猪……究竟什么是家呢?记得在一个朋友的结婚典礼上司仪饱含深情的那句话:家不是讲理的地方,家不是放钱的地方,家不是两个人凑合过日子的地方……

白帽子安全:

IT 计算机&信息网络 技术:

URFDS: Systematic discovery of Unvalidated Redirects and Forwards in web applications

Author:
Jing Wang, Hongjun Wu
School of Physical and Mathematical Sciences, Nanyang Technological University, Singapore

Abstract:
URL redirection is necessary in web applications. Well-designed redirection makes better user experience. However, if usedimproperly, it could give rise to attacks such as phishing. These improperly used redirections are called Unvalidated Redirects and Forwards (URF). This paper prescribes a mechanism to systemically discover URF vulnerabilities in web applications. The prototype implementation, that we call Unvalidated Redirects and Forwards Detection System (URFDS), uses a black-box scanning technique to modify URLs and analyse the generated output to identify URF. In order to show the feasible of our approach, we tested 142,522,691 unique links and found a great number of vulnerabilities in top websites and popular applications that were overlooked by previous works.

http://ieeexplore.ieee.org/xpl/articleDetails.jsp?arnumber=7346891


评论

热度(17)

  1. 白帽子安全IT 计算机&信息网络 技术 转载了此图片  到 文豆 & 文库
  2. 點滴的記錄IT 计算机&信息网络 技术 转载了此图片
  3. 谷雨 醉心 冬小麦IT 计算机&信息网络 技术 转载了此图片
  4. 家庭小木屋白帽子安全 转载了此图片
  5. 琐事,日常之事白帽子安全 转载了此图片
  6. 计算机网络技术白帽子安全 转载了此图片
  7. 琐事,日常之事白帽子安全 转载了此图片  到 IT 计算机信息网络安全技术
  8. 白帽子安全IT 计算机&信息网络 技术 转载了此图片