[F10_WebHack] Lab 2內容與繳交注意事項

代理伺服器(Proxy)在Web安全中扮演相當重要的角色,除了外部的代理伺服器外,也可以安裝於本機,功能上除了節省頻寬等傳統的好處之外,依照使用者
的活用還可以用於跳板、監聽資料流等功能。身為資訊系的學生,學習開發網站應用是大部分人都會歷經的道路,但是許多人自己開發的網站應用都有
 SQL injection、Cross-site scripting 等問題。本次 Lab 就是要大家嘗試使用 Paros 這款Web Proxy,這款特殊的 Web Proxy 架設在使用者的瀏覽器
和目標網站之間,所有的 HTTP 或是HTTPS 的請求與回應都會通過 Proxy ,所以可以仔細研究甚至修改這些資訊(包括 Cookies、Hidden Form 變數等請求
與回應的內容),甚至使用工具內建的弱點掃描和偵測工具幫助檢查自己所開發的網頁。


Lab2 要求:
1. 下載並安裝 Paros
2. 找一個網站做簡單的瀏覽測試,了解 Paros 的功能
3. 於宅學習 SLS 上寫下操作經驗與心得分享
4. 心得分享中請簡介何謂 SQL injection 與 Cross-site scripting

注意:
本 Lab 建議掃描自己過去開發過的網頁,如要掃描(甚至攻擊)他人網站請自行承擔法律問題

參考資料:
http://blog.miniasp.com/post/2008/12/Useful-tool-Paros-web-application-security-assessment.aspx
http://www.parosproxy.org/ (官方網站)

回應

Very good written article. It will be supportive to anyone who utilizes it, including me. Keep doing what you are doing – can’r wait to read more posts. Canada Visa Weather

Nice post. I was checking constantly this blog and I’m impressed! Extremely useful info specially the last part I care for such information a lot. I was seeking this certain info for a long time. Thank you and good luck. rapid frontend

Succeed! It could be one of the most useful blogs we have ever come across on the subject. Excellent info! I’m also an expert in this topic so I can understand your effort very well. Thanks for the huge help. gmail login

لا يوجد افضل من اخصائية تغذية في الرياض بالمملكة العربية السعودية أو اخصائي تغذية حمية علاجية لانقاص الوزن ومراقبة الغذاء وعلاج السمنة اخصائية تغذية حمية السعودية

مرحباً بكم في الموقع الالكتروني لمكتب الصفوة للمحاماة والاستشارات القانونية. يمكنكم طلب محامي في الرياض واتساب على الرقم محامي الرياض السعودية

لطلب محامي في جدة تواصل مع مكتب مجموعة الدوسري للمحاماة والاستشارات القانونية. يمكنكم طلب المحامي بجدة للاستشارة القانونية محامي جدة السعودية

Trusted & Reviewed Agents / Latest Asian Handicap Odds / Live Scores / Live TV Streams / Forum Discussion / Football Betting Tips and Predictions. Singapore best online casino websites

You there, this is really good post here. Thanks for taking the time to post such valuable information. Quality content is what always gets the visitors coming. kitpvp servers

I can see that you are an expert at your field! I am launching a website soon, and your information will be very useful for me.. Thanks for all your help and wishing you all the success in your business. minecraft survival servers

Awesome article! I want people to know just how good this information is in your article. It’s interesting, compelling content. Your views are much like my own concerning this subject. packet tracer download for windows 10

This is just the information I am finding everywhere. Thanks for your blog, I just subscribe your blog. This is a nice blog.. minecraft 1.18 servers

The Test Bank for Lewis Medical Surgical Nursing 11th Edition by Harding is a study guide that will thoroughly prepare you for your upcoming exam. Download your free sample today! med surg test bank

There is so much in this article that I would never have thought of on my own. Your content gives readers things to think about in an interesting way. Thank you for your clear information. minecraft smp servers

Someone Sometimes with visits your blog regularly and recommended it in my experience to read as well. The way of writing is excellent and also the content is top-notch. Thanks for that insight you provide the readers! minecraft 1.18.1 servers

Yes, I am entirely agreed with this article, and I just want say that this article is very helpful and enlightening. I also have some precious piece of concerned info !!!!!!Thanks. minecraft prison servers

The article looks magnificent, but it would be beneficial if you can share more about the suchlike subjects in the future. Keep posting. minecraft parkour servers

There are a lot of blogs over the Internet. But I can surely say that your blog is amazing in all. It has all the qualities that a perfect blog should have. minecraft skyblock servers

Yes, I am entirely agreed with this article, and I just want say that this article is very helpful and enlightening. I also have some precious piece of concerned info !!!!!!Thanks. best faction servers minecraft

Excellent article. Very interesting to read. I really love to read such a nice article. Thanks! keep rocking. minecraft anarchy servers

BETFLIX ORG สล็อต SLOT ออนไลน์ เว็บตรงไม่ผ่านเอเย่นต์ ครบทุกค่าย JOKER Gaming สมัคร และทดลองเล่นฟรี เกมมากกว่าพันเกม ผ่านมือถือได้ทุกระบบ betflix

Parislnwslot เราคือ เว็บไซต์ผู้ให้บริการเกมสล็อตออนไลน์ สล็อตเว็บตรง ไม่ผ่านเอเย่นต์ บริการตลอด 24 ชั่วโมง. สล็อต เว็บ ตรง

Pretty good post. I have just stumbled upon your blog and enjoyed reading your blog posts very much. I am looking for new posts to get more precious info. Big thanks for the useful info. slot online terpercaya pandora188

หวยออนไลน์ เว็บพารวย RUAY รวย 888 เว็บตรง จ่ายเยอะของแท้ แทงหวยออนไลน์ หวยรัฐบาล หวยลาว หวยฮานอย จับยี่กี ตรวจหวย ผลหวย จ่ายสูงถึง บาทละ 900 แทงหวยออนไลน์จ่ายเต็ม heng888 รวย รวย เฮง เฮง ทุกคน ruay

Selamat datang di link alternatif Naga95. Situs slot deposit pulsa paling GACOR di 2022. Login Naga95 sekarang! Raih kesempatan bonus new member 30%, Cashback hingga bonus rolingan paling sensasional saat ini. Naga95

Your content is nothing short of brilliant in many ways. I think this is engaging and eye-opening material. Thank you so much for caring about your content and your readers. fresh air

Thank you very much for writing such an interesting article on this topic. This has really made me think and I hope to read more. heating repair service san antonio

Very good written article. It will be supportive to anyone who utilizes it, including me. Keep doing what you are doing – can’r wait to read more posts. Link Alternatif Bola88

Bonanza88 adalah situs judi online terbaik 2022. Dan menjadi bagian penting dalam industri perjudian Indonesia sejak 2016 dengan varian permainan lengkap. Seperti, bola tangkas, slot, taruhan olahraga, livecasino dan lainnya. Halaman ini merupakan link alternatif bonanza88, sebagai cara bagi Anda agar untuk melakukan Bonanza88 Login pada situs resmi yang aktif. Dapatkan juga berbagai program promo Bonanza88 Slot terbaru dengan cara registrasi sekarang juga. Bonanza88

Selamat datang di Daftar Situs Khusus Judi Slot Online Terpercaya. Slot95 adalah bandar judi online yang telah melayani ribuan member sejak tahun 2016. Menjadi salah satu agen yang menyediakan berbagai jenis permainan populer. Khususnya, slot online. Slot95

PCA QUALIFIED We Are The Damp Experts At HPS Damp Proofing we carry the highest qualifications in our Industry which are thePCA CSDB, CSTDB and NVQ’s in Dampness and Timber Preservation. If you feel you have a damp issue please do not hesitate to get in touch with us so one of our specialist team Damp Proofing

The Test Bank for Essentials of Pharmacology for Health Professions 8th Edition by Colbert is a study guide that will thoroughly prepare you for your  nclex test prep

There is so much in this article that I would never have thought of on my own. Your content gives readers things to think about in an interesting way. Thank you for your clear information. ipvanish review

Offers can be free bets, additional amounts entered into your account, and many other offers. It is good to check the offers that different sites have. Malaysia Trusted Online Betting