Web Security

Visit the site http://google-gruyere.appspot.com/. There you will find a tutorial-like website that will walk you through a variety of web attacks and exploits. Note that you need not implement any fixes, but you should read through all of it. The exploits are all pretty much given to you, you may have to think a little on some, but others are just cut/paste.

In a single document, copy/paste the line(s) of code that you used for the exploit as well as a print-screen or some other proof that the exploit worked.

You will need to complete the following exploits:

• File Upload XSS
• Reflected XSS
• Stored XSS
• Stored XSS via HTML Attribute
• Elevation of Privelege
• Cookie Manipulation
• XSRF
• Information disclosure with path traversal
• Data Tampering with Path traversal (exploit 1)(may have to hard refresh browser so it won’t grab what’s cached)
• DoS - quit the server (ex 1)

To pass off

In a single document, copy/paste the line(s) of code that you used for the exploit as well as a print-screen or some other proof that the exploit worked.

Upload to canvas.

Last Updated 12/12/2022