sdvv 7dpshulqj gdwd %uxwh iruflqj...hypertext transfer protocol (http) http is the protocol for...

33
IN5290 Ethical Hacking Lecture 4: Web hacking 1, Client side bypass, Tampering data, Brute-forcing Universitetet i Oslo Laszlo Erdödi

Upload: others

Post on 23-Jul-2020

3 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 Ethical HackingLecture 4: Web hacking 1, Client side bypass, Tampering data, Brute-forcing

Universitetet i Oslo

Laszlo Erdödi

Page 2: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 2

Page 3: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 3

Page 4: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 4

Page 5: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 5

Page 6: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 6

Page 7: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 7

Page 8: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 8

Page 9: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 9

Page 10: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 10

Page 11: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 11

Page 12: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 12

Page 13: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 13

Page 14: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 14

Page 15: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 15

Page 16: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 16

Page 17: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 17

Page 18: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 18

Page 19: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 19

Page 20: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 20

Page 21: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 21

Page 22: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 22

Page 23: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 23

Page 24: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 24

Page 25: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 25

Page 26: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 26

Page 27: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 27

Page 28: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 28

Page 29: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 29

Page 30: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 30

Page 31: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 31

Page 32: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 32

Page 33: SDVV 7DPSHULQJ GDWD %UXWH IRUFLQJ...Hypertext Transfer Protocol (HTTP) HTTP is the protocol for Client communication. web Currently version 1.0, 1.1 and 2.0 are in use (2.0 exits since

IN5290 2019 L05 – Web hacking 1. 33