OWASP Top 10 Vulerabilities "A1:2017-Injection"
Top 10 Vulnerabilities in web applications- OWASP Introduction OWASP (Open web application security project) community helps organizations cultivate secure applications. They come up with standards, freeware tools and conferences that help organizations as well as researchers. Here we see about A1-Injection which is Top 1 on OWASP along with the risk, impact, and Solutions. Will discuss more about OWASP top10 vulnerabilities along with few examples. This will to understand these Vulnerabilites in the web applications. What more?? Let us start! 1. Injection Introduction “Injection attacks occur when the user is able to input untrusted data tricking the application/system to execute unintended commands.” Injections can be – SQL queries, PHP queries, LDAP queries and OS commands. Before we jump to the examples: Let us think about few things: Q: What to inject? A: Queries, OS commands, codes and URL argument manipulations. Q: Where to inject? A: Wher...