分享本身就是件快乐的事 我因别人得到帮助而感到幸福
Syscan - Next Generation .NET Vulnerabilities.pdf
2008年11月16日 0:45:57 发布:Trace
Pretty cool analysis. The "ASP.NET's ValidateRequest stops XSS so its up to the dev to mess it up" is incorrect. Ignore esoteric attacks like double/triple encodings, etc. Lets do something basic.
固定链接 | 分类:Papers | 评论:0 | 引用:0 | 浏览:
Powered By Z-Blog .Theme from Google黑板报 By Washun
Copyright 2008-2009 Pcsec.org. Some Rights Reserved.苏ICP备08110306号
Search
网站分类
文章归档
- 2010 August (4)
- 2010 July (1)
- 2010 June (4)
- 2010 April (8)
- 2010 March (6)
- 2010 February (9)
- 2010 January (10)
- 2009 December (15)
- 2009 November (6)
- 2009 October (3)
- 2009 September (6)
- 2009 August (11)
- 2009 July (14)
- 2009 June (11)
- 2009 May (29)
- 2009 April (25)
- 2009 March (34)
- 2009 February (26)
- 2009 January (31)
- 2008 December (53)
- 2008 November (62)
- 2008 October (73)
- 2008 September (6)
- 2008 August (6)
- 2008 July (8)
- 2008 May (2)
- 2008 April (3)
- 2008 March (2)
- 2008 January (1)
- 2007 October (1)
- 2007 September (1)
- 2007 August (1)
- 2007 April (1)
- 2007 March (1)
- 2007 February (3)
- 2006 May (1)
- 2006 February (1)