Skip to main content

Diigo Home
Home/ Groups/ Qualité web et testing
David Lafon

Injection SQL tuto sur les failles de type injection sql - 0 views

  • David Lafon
     
    Voici un tutoriel sur l'injection SQL sous MySQL et MS SQL server. Dans ce tuto vous verez toutes la puissance des injections; ma platforme de test : LAMP avec magic_quote à OFF dans une première partie et ensuite magic_quote à ON ;-)
    Une injection SQL est un type d'exploitation d'une faille de sécurité d'une application web. On va injecter une requète SQL non prévue par le système et pouvant compromettre sa sécurité.
  • David Lafon
     
    Voici un tutoriel sur l'injection SQL sous MySQL et MS SQL server. Dans ce tuto vous verez toutes la puissance des injections; ma platforme de test : LAMP avec magic_quote à OFF dans une première partie et ensuite magic_quote à ON ;-)
    Une injection SQL est un type d'exploitation d'une faille de sécurité d'une application web. On va injecter une requète SQL non prévue par le système et pouvant compromettre sa sécurité.
David Lafon

Tester vos pages avec un lecteur d'écran - Communauté de pratique sur l'accessibi... - 0 views

  • David Lafon
     
    Ce document est une adaptation d'une partie des Manuels sur l'utilisation de JAWS et de Window-Eyes par Jean-Marie D'Amour
  • David Lafon
     
    Ce document est une adaptation d'une partie des Manuels sur l'utilisation de JAWS et de Window-Eyes par Jean-Marie D'Amour
David Lafon

Pylot | Open Source Web Performance Tool - 0 views

  • David Lafon
     
    Pylot is a free open source tool for testing performance and scalability of web services. It runs HTTP load tests, which are useful for capacity planning, benchmarking, analysis, and system tuning.
    Pylot generates concurrent load (HTTP Requests), verifies server responses, and produces reports with metrics. Tests suites are executed and monitored from a GUI or shell/console.
David Lafon

RATS - Rough Auditing Tool for Security - 0 views

  • David Lafon
     
    RATS - Rough Auditing Tool for Security - is an open source tool developed and maintained by Secure Software security engineers. Secure Software was acquired by Fortify Software, Inc. RATS is a tool for scanning C, C++, Perl, PHP and Python source code and flagging common security related programming errors such as buffer overflows and TOCTOU (Time Of Check, Time Of Use) race conditions.
David Lafon

Graudit - Just Another Hacker - 0 views

  • David Lafon
     
    Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep. It's comparable to other static analysis applications like RATS, SWAAT and flaw-finder while keeping the technical requirements to a minimum and being very flexible.
David Lafon

OpenVAS - OpenVAS - Open Vulnerability Assessment System Community Site - 0 views

  • David Lafon
     
    OpenVAS stands for Open Vulnerability Assessment System and is a network security scanner with associated tools like a graphical user front-end. The core component is a server with a set of network vulnerability tests (NVTs) to detect security problems in remote systems and applications.
    OpenVAS products are Free Software under GNU GPL and a fork of Nessus.
David Lafon

sqlmap: automatic SQL injection tool - 0 views

  • David Lafon
     
    sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.
David Lafon

eValid -- Web Applications Testing & Analysis Suite - 0 views

  • David Lafon
     
    eValid™ Web Testing & Analysis Suite
1 - 20 of 97 Next › Last »
Showing 20 items per page
Apply to join this group