Web 2.0 Application Kung-Fu - Securing Ajax & Web Services

Web 2.0 Application Kung-Fu Securing Ajax & Web Services Shreeraj Shah DeepSec 2007– Vienna,2007

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Who am I? http://shreeraj.blogspot.com [email_address]

Agenda ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Web 2.0 Trends ,[object Object],[object Object],[object Object]

Web 2.0 – Ajax & Web Services HTML / JS / DOM RIA (Flash) Ajax Browser Internet Blog Local Application Database Authentication Internet Weather News Documents Emails Bank/Trade RSS feeds Web Services

Widget DOM HTML/CSS JavaScript SOAP XML-RPC JSON XML Open APIs SaaS Services REST Browser Protocols Web 2.0 Layers Ajax Flash / RIA JSON-RPC Structures Server-Side HTTP(S)

Technologies Web Server Static pages HTML,HTM etc.. Web Client Scripted Web Engine Dynamic pages ASP DHTML, PHP,CGI Etc.. DB X ASP.NET with .Net J2EE App Server Web Services Etc.. Application Servers And Integrated Framework Internet DMZ Trusted Internal/Corporate W E B S E R V I C E S Ajax RIA Client SOAP, REST, XML-RPC, JSON etc.

Web 2.0 Security ,[object Object],[object Object],[object Object],[object Object],[object Object]

Ajax Security – Attacks & Defense ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Ajax basics ,[object Object],HTML / CSS JS / DOM XMLHttpRequest (XHR) Database / Resource XML / Middleware / Text Web Server Asynchronous over HTTP(S)

Ajax - Sample ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Ajax & Data structures ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Cross-domain calls ,[object Object],[object Object],[object Object],[object Object]

Ajax fingerprinting ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Ajax attack points ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Ajax attack vectors ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Ajax Scanning ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Ajax serialization issues ,[object Object],message = { from : "john@example.com", to : "jerry@victim.com", subject : "I am fine", body : "Long message here", showsubject : function(){document.write(this.subject)} }; XSS

Ajax serialization issues ,[object Object],[object Object],{"bookmarks":[{"Link":"www.example.com","Desc":"Interesting link"}]} new Array(“Laptop”, “Thinkpad”, “T60”, “Used”, “900$”, “It is great and I have used it for 2 years”)

Ajax and JS manipulation ,[object Object],[object Object],[object Object],[object Object],[object Object]

Ajax and RSS injection ,[object Object],[object Object],[object Object],[object Object]

Ajax Crawling ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Defending Ajax ,[object Object],[object Object],[object Object],[object Object],[object Object]

Web Services – Attacks & Defense ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Methodology Footprinting & Discovery Enumeration & Profiling Vulnerability Detection Code / Config Scanning Web Services Firewall Secure Coding Insecure Web Services Secure Web Services Blackbox Whitebox Defense & Countermeasure

Footprinting and Discovery ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Primary Discovery ,[object Object],[object Object],[object Object]

Primary Discovery - Demos ,[object Object],[object Object],[object Object],[object Object]

Secondary Discovery ,[object Object],[object Object],[object Object],[object Object],[object Object]

Enumerating and Profiling ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Scanning strategies ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Cross Site Scripting (XSS) ,[object Object],[object Object],[object Object],[object Object],[object Object]

Injection Flaws ,[object Object],[object Object],[object Object],[object Object]

Malicious File Execution ,[object Object],[object Object],[object Object]

Insecure Direct Object Reference ,[object Object],[object Object],[object Object],[object Object],[object Object]

Cross Site Request Forgery ,[object Object],[object Object],[object Object],[object Object],[object Object]

Code Analysis for Web Services ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object],[object Object],[object Object],Code filtering with IHTTPModule

HTTP Stack for .Net HttpRuntime HttpApplicationFactory HttpApplication HttpHandlerFactory IHttpModule Handler Web Application Firewall & IDS 148

IHTTPModule for Web Services Firewall ,[object Object],[object Object],[object Object],[object Object],[object Object]

Thanks! ,[object Object],[object Object]

Web 2.0 Application Kung-Fu - Securing Ajax & Web Services

Recomendados

Recomendados

Más contenido relacionado

La actualidad más candente

La actualidad más candente (20)

Similar a Web 2.0 Application Kung-Fu - Securing Ajax & Web Services

Similar a Web 2.0 Application Kung-Fu - Securing Ajax & Web Services (20)

Más de Shreeraj Shah

Más de Shreeraj Shah (17)

Último

Último (20)

Web 2.0 Application Kung-Fu - Securing Ajax & Web Services