diff options
| -rw-r--r-- | synopsis.pdf | bin | 165117 -> 166149 bytes | |||
| -rw-r--r-- | synopsis.tex | 35 |
2 files changed, 19 insertions, 16 deletions
diff --git a/synopsis.pdf b/synopsis.pdf Binary files differindex fa25de5..361b3f0 100644 --- a/synopsis.pdf +++ b/synopsis.pdf diff --git a/synopsis.tex b/synopsis.tex index b03774b..845173e 100644 --- a/synopsis.tex +++ b/synopsis.tex @@ -352,10 +352,10 @@ is an example of remote file injection made in PHP: \end{minted} The intended behavior is to load a PHP file, which is on the server, when -loading an URL like: \texttt{https://example.com/cars.php?car=lamborghini}. +loading an URL like: \texttt{http://www.website.com/cars.php?car=lamborghini}. This should load the lamborghini.php file. However, it could be exploited to load a remote file with malicious code just by changing the end of the URL, -from \texttt{lamborghini} to \texttt{https://attackerswebsite.com/badcode}. +from \texttt{lamborghini} to \texttt{http://www.attackerswebsite.com/badcode}. Another injection attack is command injection. In this attack, the attacker can execute shell commands by passing them to an application, which does not do @@ -574,40 +574,43 @@ end, I managed to finish my synopsis on time, so it is not a big issue. |