Seguridad en web

Introducción, ataques y contramedidas

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Práctica: nc Práctica: webscarab Práctica: XSS

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Introducción Cliente Servidor WEB Servidor de Aplicación Servidor de BDD HTTP SQL

El protocolo HTTP ,[object Object],Cliente Servidor WEB HTTP Request HTTP Response Cabecera Línea en blanco Cuerpo del mensaje (opcional) Mensaje HTTP

HTTP REQUEST ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Cliente Servidor WEB HTTP Request

[object Object],HTTP REQUEST ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Método URL Versión

Métodos HTTP ,[object Object],[object Object],[object Object],[object Object]

Cabeceras comunes ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Cabeceras HTTP Request ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

HTTP RESPONSE ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Cliente Servidor WEB HTTP Response

[object Object],HTTP RESPONSE ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Versión Código Texto

Códigos de estado ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Cabeceras HTTP Response ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Práctica: nc ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Práctica: nc ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Cookies ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Cliente Servidor WEB Set-Cookie : tracking=tI8rk7joMx44S2Uu85nSWc Cookie : tracking=tI8rk7joMx44S2Uu85nSWc

Identificadores de sesión ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

WebScarab ,[object Object],[object Object],[object Object],[object Object],[object Object]

Otras herramientas ,[object Object],[object Object],[object Object],[object Object]

Repaso ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object]

[object Object],[object Object]

XSRF o CSRF (Cross- Site Request Forgery) ,[object Object],[object Object]

XSRF – Puesta en Situación ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

XSRF – Puesta en Situación ,[object Object],[object Object],[object Object],[object Object],[object Object]

XSRF – Aspectos ,[object Object],[object Object],[object Object]

XSRF - Tipología ,[object Object],[object Object],[object Object],[object Object]

XSRF - Persistente ,[object Object],[object Object],[object Object],[object Object],[object Object]

XSRF VS XSS ,[object Object],[object Object],[object Object]

XSRF - Ejemplos ,[object Object],[object Object],[object Object]

XSRF – Información ,[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object],[object Object],Cliente Servidor WEB Servidor de Aplicación Servidor de BDD

Blind SQL Injection ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],SQL para obtener tablas

SQL Injection - Herramientas ,[object Object],[object Object],[object Object],[object Object]

Ajax, bonito pero ¿Seguro? ,[object Object]

Ajax, Introducción ,[object Object],[object Object],[object Object],[object Object]

Características de Ajax ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Fallas de Seguridad en Ajax ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],http://www.owasp.org/index.php/Category:OWASP_WebScarab_Project

Seguridad en Ajax ,[object Object],[object Object]

Contramedidas ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Input Validation ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Diseño Robusto ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Detection and Dissuasion ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Harden the Server ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Ponentes ,[object Object],[object Object],[object Object],[object Object]

Seguridad en web

Recomendados

Recomendados

Más contenido relacionado

La actualidad más candente

La actualidad más candente (10)

Similar a Seguridad en web

Similar a Seguridad en web (20)

Seguridad en web