Introduction to Web security
- 1. Introduction to Web Security
- 2. What is Web Security? Why Web Security?
- 3. Top 10 PHP application vulnerabilities 2016
- 4. Information Leakage app environment, user specific data âą Restrict PHP information leakage âą Configuration files â Configuration files should be in php not .ini, xml, etc â Secure App config variables by storing on server âą Separate your back up files from root directory HTTP/1.x 200 OK Date: Sun, 21 Aug 2016 16:08:15 GMT Server: Apache X-Powered-By: PHP/5.5.26 ...
- 6. SSL How does HTTPS works? This presume User Accessing Secure Site Requesting Secure SSL connection from Website Host. Website Records Found. Going to the Host Web Server. Check DNS for IP address to find Web host Host responds with valid SSL certificate. Secure connection is established to transfer data WebHost.
- 7. Injection Attacks âą Cross Site Scripting - XSS âą SQL Injection âą Code Injection âą Command Injection âą Log Injection âą XML Injection
- 8. SQL Truncation Exploit Compromise user login âą SELECT * FROM user WHERE username='admin â âą Username = âadmin xâ âą $userdata = null; if (isPasswordCorrect($username, $password)) { $userdata = getUserDataByLogin($username); ... } SELECT username FROM users WHERE username = ? AND passhash = ? SELECT * FROM users WHERE username = ? Solution: â Mysql strict mode â Unique constraint column
- 9. But what if you find you have been hacked âą Donât panic âą Check logs (error /access) âą Check suspicious file names âą Check cron jobs âą search source code for keywords like: eval, base64_decode, wget, curl âą take DB backup & search for keywords like âiframe, script,âŠâ âą Prepare yourself to reinstall your entire server
- 10. How to Prevent âą Check OWASP âą Use STRONG Password hash âą Error Reporting â Prodcution â OFF â Development / Other â ON âą Stay up-to-date â Framework â OS â 3rd party libraries â Read about new threats and best practice changes âą Try to run vulnerabilities scanner