Time spent: 10 hours spent in total
Objective: Identify vulnerabilities in three different versions of the Globitek website: blue, green, and red.
The six possible exploits are:
- Username Enumeration
- Insecure Direct Object Reference (IDOR)
- SQL Injection (SQLi)
- Cross-Site Scripting (XSS)
- Cross-Site Request Forgery (CSRF)
- Session Hijacking/Fixation
Each version of the site has been given two of the six vulnerabilities. (In other words, all six of the exploits should be assignable to one of the sites.)
Vulnerability #1: SQL Injection (SQLi) Week8_SQLI
Vulnerability #2: Session Hijacking/Fixation http://i.imgur.com/vnp6gR0.gif
Vulnerability #1: Username Enumeration http://i.imgur.com/xeWJxW2.gif
Vulnerability #2: Cross-Site Scripting http://i.imgur.com/LGyb6Cw.gif
Vulnerability #1: Insecure Direct Object Reference (IDOR) http://i.imgur.com/HhqdV19.gif
Vulnerability #2: Cross-Site Request Forgery
Followed by this guide: https://www.owasp.org/index.php/Testing_for_CSRF_(OTG-SESS-005) This one, I used postman to fire the POST request. After logging in as admin, I fired the POST request with the body of the following(see notes), however, I didn't see salespeople(id=7)'s info got editted.
https://drive.google.com/file/d/0BzsBD-G31f93Z25FcE9PVnVIdlk/view?usp=sharing