Git-Mirrors/sec-pentesting-toolkit
1
0
Fork 0
mirror of https://github.com/autistic-symposium/sec-pentesting-toolkit.git synced 2025-06-19 20:34:07 -04:00
Code Issues Projects Releases Packages Wiki Activity

websecurity

Browse source
This commit is contained in:
bt3gl 2014-11-20 10:06:55 -05:00
parent 0a30e5e40e
commit c8705de960
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
Web_Security/README.md
View file

@ -49,6 +49,7 @@ $ wget -rck <TARGET-WEBSITE>
```
$ /wget -r -l1 -H -t1 -nd -N -nd -N -A.swf -erobots=off <WEBSITE> -i output_swf_files.txt
```
* Once we have identified and downloaded *.swf files, we must analyze the code, the functions (as *loadMovie*) variables in order to identify those that call and allow other types of vulnerabilities such as cross site scripting. Below shows some vulnerable functions: