ALL ABOUT APPLICATION SECURITY TESTING

🕳 Application security testing

Are you aware that nearly 84% of the software breaches exploit the vulnerabilities present in the application layer? Shocking but true! And with the web being such a diverse platform, weaknesses aren’t scarce. As most of us are getting more reliant on the utility of different applications, the extent of threats is also increasing considerably. To reduce the attacks on the applications and protect them from subsequent damages, application security testing has proved to be the ultimate savior.

So here is a brief description of application security testing and the types of web application security testing.

Contents

1. Why application security testing is important?
2. What is applications security testing?
3. Different types of applications security testing.
4. (SAST) static allocation security testing.
5. (DAST) Dynamic Applications security testing.

Comments

SQL Injection Types.

SQL Injection Types: There are various types of SQL Injection. We will consider a few of them below. 1.) Union-based SQL Injection: With the help of the union operators, we can combine the results of two or more SELECT statements to a single output. The return of this single output is a part of the HTTP response . We can use it to extract data from other tables as well. Example: ‘ AND ‘a’=’b’ UNION SELECT 101, ‘abc’, ‘xyz’ FROM members WHERE ‘a’=’a The single quote at the start specifies the end of the original query. The first query must set to FALSE , hence we specify the condition as ‘a’=’b’ after AND function. Both queries that are before and after UNION must have the same structure otherwise it will generate an error. It will generate the SQL query after getting the input from the user as: SELECT id, name, description FROM products WHERE category = ” AND ‘a’=’b’ UNION SELECT 101, ‘abc’, ‘xyz’ FROM members WHERE ‘a’=’a’ So it will retu...

SMS bombing, Call Bombing, pranks with friends using termux app

This is only for educational purposes Don't misuse it The script requires working network connection to work. No balance will be deducted for using this script to send SMS/calls. While doing infinite bombing use 2-3 seconds delay and 10 to 20 threads for maximum performance. Don't put spaces in between phone number (Ex- 99999 99999) Make sure you are using the latest version of TBomb Make sure you are using Python3. $ python -V If output looks like Python 3 - Congrats, Python 3 is installed properly. 👉 Do not use this to harm others. 👉 This script is only for educational purposes or to prank. 👉 None of the developers/contributors are responsible for the misuse of TBomb. Features: 👉 Lots of integrated SMS/call APIs 👉 Unlimited (Limited against abusing) and super-fast bombing 👉 International bombing available (APIS Dead. Try Your Luck.) 👉 Call bombing 👉 Frequent updates 👉 Automatic updating mechanism 👉 Easy to use and embed in code ...

Top most dangerous computer viruses 😮😮😲

1. ILOVEYOU ILOVEYOU is considered one of the most virulent computer virus ever created . It managed to wreck havoc on computer systems all over the world with around $10 billion worth of damages. 10% of the world’s computers were believed to have been infected. It was so bad that governments and large corporations took their mailing system offline to prevent infection. The virus was created by two Filipino programers, Reonel Ramones and Onel de Guzman. What it did was use social engineering to get people to click on the attachment ; in this case, a love confession . The attachment was actually a script that poses as a TXT file, due to Windows at the time hiding the actual extension of the file. Once clicked, it will send itself to everyone in the user’s mailing list and proceed to overwrite files with itself, making the computer unbootable. The two were never charged, as there were no laws about malware. This led ...

Devil tech

Search This Blog