Ian Muscat - DZone Member

Mitigate Slow HTTP GET/POST Vulnerabilities in the Apache HTTP Server

Learn how you can mitigate slow HTTP GET/POST vulnerabilities in the Apache HTTP Server.

June 26, 2019

· 16,193 Views · 1 Like

An attack where an attacker may trick a web app into reading and divulging the contents of files outside of the root directory of the app or the web server. Scary stuff!

December 15, 2017

· 11,660 Views · 1 Like

Cross-Site Scripting in HTTP Headers

Cross-Site Scripting (XSS) is one of the most common vulnerabilities on the web. Learn how you as a developer can guard against it.

September 4, 2017

· 20,117 Views · 5 Likes

Out-of-Band XML External Entity (OOB-XXE)

We wrap up our series on XXE vulnerabilities and discuss how hackers can use OOB-XXE to steal data from the victims' system.

July 21, 2017

· 9,731 Views · 0 Likes

XML External Entity (XXE) Limitations

We continue our series on XML External Entity attacks, by looking at some typical situations for XXE attacks, and the limitations and shortcomings of this attack.

July 20, 2017

· 15,950 Views · 1 Like

SQLi Part 3: In-Band, Inferential, and Out-of-Band SQL Injection

We continue on with our series on SQL injection by exploring the three main types of SQLi attacks and how cyberattackers tend to use them.

June 2, 2017

· 31,440 Views · 2 Likes

What Is Server-Side Request Forgery (SSRF)?

SSRF attacks are no fun and need to be accounted for in any web-facing application. In this post we take a look at what they are and what you can do to help prevent them.

May 22, 2017

· 12,499 Views · 2 Likes

What Is Email Header Injection?

We've all heard of emails being vectors for attacks, but what exactly is email header injection, how can it be mitigated? We take a look at these questions in this post.

May 12, 2017

· 18,043 Views · 9 Likes

What Is a Host Header Attack?

Read to learn what a host header attack is, how to defend against a host header attack, and what kinds of vulnerabilities these attacks seek out.

May 10, 2017

· 74,731 Views · 8 Likes

What Is Local File Inclusion (LFI)?

In this article, we discuss a Hollywood-type hack, Local File Inclusion, in which an attacker can trick your web app into including malicious files.

April 29, 2017

· 12,576 Views · 1 Like

What Are Injection Attacks?

In the world of security, it's important to know what you're up against. In this post, we've provided a list of the most common and dangerous web attacks.

April 26, 2017

· 33,982 Views · 4 Likes

Reputation:	753
Pageviews:	403.7K
Articles:	11
Comments:	0