5 ms·
Last time it was all low-level vulnerabilities, which require some work to exploit (I even struggled with a couple of them, and I've been working on that sort o
by daeken 14y ago
Last time it was all low-level vulnerabilities, which require some work to exploit (I even struggled with a couple of them, and I've been working on that sort of thing for many many years). This time around it's websec, which is considerably easier in most respects, and the main knowledge you need is pretty standard for any web developer. You just need to turn things around and look at it from the perspective of "what happens from input to output?"
- deleted 14y ago[deleted]
- apazzolini 14y agoYes, the last one had some extremely hard problems. Can't wait for this one - I work on an ecommerce framework and this sorta stuff is way more applicable to what I do day to day
- benmmurphy 14y agosome of the websec exploits are quite tricky/involved like blind sql injection (https://www.owasp.org/index.php/Blind_SQL_Injection https://www.owasp.org/index.php/Blind_SQL_Injection). without tools like sql map you would need to write code in order to recover non-trivial amounts of data using blind sql injection.