Comments (5)
GoogleCodeExporter
commented on September 23, 2024
This isn't a defect, but I'm not sure how to change the "Type" to
"Enhancement"...
Original comment by [email protected] on 17 Sep 2008 at 6:27
from ratproxy.
GoogleCodeExporter
commented on September 23, 2024
Hmm, many servers return 30x messages with bodies to assist navigation in case
automatic redirection is not supported or fails, for example Apache does:
HTTP/1.1 301 Moved Permanently
...
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>301 Moved Permanently</TITLE>
</HEAD><BODY>
<H1>Moved Permanently</H1>
The document has moved <A HREF="...">here</A>.<P>
<HR>
We could still replay the request without cookies to see if the response
changes, but
I'm curious as to how likely this would be?
Original comment by [email protected] on 29 Sep 2008 at 5:28
from ratproxy.
GoogleCodeExporter
commented on September 23, 2024
Original comment by [email protected] on 29 Sep 2008 at 5:28
- Added labels: Type-Enhancement
- Removed labels: Type-Defect
from ratproxy.
GoogleCodeExporter
commented on September 23, 2024
[deleted comment]
from ratproxy.
GoogleCodeExporter
commented on September 23, 2024
Hi,
Thanks, sounds like we're on the same page :) I was thinking about just
checking to
make sure that authenticated content doesn't exist.
Some pages may be different per authenticated user. For example, if User Role A
cannot see all the fields that User Role B sees, then this might be a change in
content. What I would like to test for is to make sure that User Role A cannot
access the administration pages AND that if a user comes in uninvited, they
also do
not get to see any pages. I would also like to catch the response, ignoring
the HTML
status code, to make sure that authenticated content is not replayed, and that
the
programmer is not depending that just because a redirect has been issued that no
other page content will be sent.
We use the PHP code header('Location: loginpage.php'); to redirect our users
who are
either not authenticated or in a timed-out session. The applications I deal
with
contain personal data, protected by legislation. If someone forgets a "die();"
command, then the page may be able to serve some personal information. Granted,
there are some cases where the above snippet is sent when a status code is
sent, but
if there could be some way to determine that it's not just a generic message, I
think
that would work :)
Some possible checks (perhaps some can be combined to prevent false negatives or
false positives):
-Content is above the maximum length, predefined in code or specified on
command line
-Content contains form elements
-Content does not contain a list of words (such as "move*", "redirect*", etc.)
Thanks again!
Original comment by [email protected] on 29 Sep 2008 at 9:16
from ratproxy.
Related Issues (20)
- Testing production servers may be insecure (according to the docs) HOT 2
- [deleted issue]
- Client SSL handshake failed HOT 2
- RatProxy 5.1 not working (SYSTEM ERROR : cannot bind to port [listen_loop(), ratproxy.c:1609]) HOT 1
- To use ratproxy to scan an application url not hosted in the localhost HOT 1
- Support client certificate authentication HOT 1
- SSL Key File not loaded if ratproxy is not started from the default folder HOT 2
- ratproxy-report.sh TODO: Use standalone stylesheets to conserve bytes.
- Scheduling a scan in ratproxy HOT 1
- Sniffed MIME type "application_javascript" instead of "application/javascript" HOT 1
- Unrecognized Certificate Authority HOT 2
- test 1234 HOT 1
- Hardcoded web-server ports HOT 5
- open forms from reports in new window HOT 1
- memory corruption HOT 2
- Report risk and risk modifier designations HOT 2
- ratproxy.c:1635: error: incompatible type for argument 2 of `waitpid' HOT 13
- ratproxy-report.sh: line 29: $'\r': command not found HOT 1
- cannot bind to port [listen_loop(), ratproxy.c:1618] HOT 1
- Google Code closing
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ratproxy.