Hi mates I have recently started to study cyber security

Question

Hi mates I have recently started to study cyber security

and as I understood that strong server side validation is tough enemy for hackers, so which tools of encoding - obfuscation do they use to break server side validation? Surprisingly Google gives little information about it

0

сегодня 08:38

8 ответов

2 просмотра

Raptor Blue Bear

Nobody will willingly give you that information

0

2 часа назад

Börke(МБорке) Автор вопроса

Sharuzzaman Ahmat Raslan
Obfuscation is not security

Correct me if I am wrong but I used to think that obfuscation (methods or tools) are used for making the validation system confused so hackers can do request/response manipulation, no?

0

2 часа назад

Sharuzzaman Ahmat Raslan

Börke(МБорке)
Correct me if I am wrong but I used to think that ...

No. Obfuscation is a way to hide something, but it is not encryption. ROT13 is an example of obfuscation. PGP keypair is encryption

0

2 часа назад

Börke(МБорке) Автор вопроса

Sharuzzaman Ahmat Raslan
No. Obfuscation is a way to hide something, but it...

Mate, then can you explain that how do hackers deal with server side validation ?(besides social engineering)

0

2 часа назад

Ludovic 'Archivist' Lagouardette

Börke(МБорке)
Mate, then can you explain that how do hackers dea...

Look for buffer overflows, look for SQL injection sites, look for timing attacks

0

2 часа назад

Börke(МБорке) Автор вопроса

Ludovic 'Archivist' Lagouardette
Look for buffer overflows, look for SQL injection ...

Ok thx for the advice. Yes these are common attacks

0

2 часа назад

Ludovic 'Archivist' Lagouardette

Börke(МБорке)
Ok thx for the advice. Yes these are common attack...

You can also look for what parser they use to see if you can get it to do more creative things (lookup "the treachery of files" conference and the mag "POC || GTFO")

0

2 часа назад

Sharuzzaman Ahmat Raslan · Accepted Answer

Sharuzzaman Ahmat Raslan

Obfuscation is not security

0

2 часа назад

Похожие чаты

Hi mates I have recently started to study cyber security

8 ответов

Похожие вопросы