wgb128的博客

关于Bug 挖掘的英文文档 Bug Hunting with Static Code Analysis Nick Jones 6 th June 2016 ++ Bug Hunting with Static Code Analysis + Software developers make mistakes + Mistakes = bugs = vulnerabilities + Our goal is fewer bugs The Problem ++ Bug Hunting with Static Code Analysis Nick Jones + Security Consultant at MWR InfoSecurity + Web application security, infrastructure assessments + Previous experience doing commercial software development + Developed bespoke analysis tools for clients

Web 应用安全漏洞原理及测试技术1 SQL注入漏洞  任意文件上传漏洞  任意文件下载漏洞  文件包含漏洞  XSS跨站脚本漏洞  CSRF跨站请求伪造漏洞  逻辑漏洞