Welcome to BARMAGY Sign in | Join | Help

December 2007 - Posts

Sunday, December 30, 2007 8:31 PM

SQL Injection Through Cookies

      Through my career as a developer I’ve seen many developers that are not aware about the possibility of SQL injection through cookies. Cookies in fact is a user input and as any input it must be validated and because
posted by Fady | 11 Comments
Thursday, December 27, 2007 6:00 PM

Facebook Wall Security Vulnerability

In Facebook if a user is logged in with the “Remember Me” option an attacker can make requests on behalf of the user to make wall posts by sending him/her a URL that contains ajax java script code that will call the Facebook services and do the post on
posted by Fady | 8 Comments
Sunday, December 23, 2007 10:22 PM

Facebook XSS Vulnerability

Today I was taking a look at the Facebook AJAX java script that is responsible to give suggestions in the search text box you find under the Facebook logo on the left I found this URL http://www.facebook.com/ajax/typeahead_search.php? hard coded in
posted by Fady | 6 Comments
Monday, December 17, 2007 12:18 AM

Catch hackers red handed using http modules

      Here is a nice trick to help you to detect hackers in action while trying to hack your web applications. The idea is very simple, we want to set a layer there between your application and the internet to watch the web
posted by Fady | 7 Comments