To secure a website or a web application, one has to first understand the target application, how it works and the scope behind it.  Ideally, the penetration tester should have some basic knowledge of programming …

In eval($WAF); whitepaper, L. Nothdurfter, W.Neudorfer and M. Kirchner from the University of Applied Sciences Upper Austria, explain in detail how they evaluated the capabilities of some leading WAF’s (web application firewalls), and concluded that …

File upload forms, nowadays can be found allover the internet.  In social network web applications, such as Facebook and Twitter, in blogs, forums, e-banking sites, YouTube and also in corporate support portals, to give the …

This white paper shows how Acunetix AcuSensor Technology increases accuracy by combining black box scanning techniques with feedback from sensors placed inside the source code while the source code is executed.
Thanks to this innovative technology …

This white paper examines the technology behind Web Services, how the system is made available to the user, and the way connections are made to back-end (and therefore sensitive) data. These different elements come together …

The paper aims to help companies meet impending PCI requirements
London, UK – May 30, 2007 – Businesses that rely on payment by credit cards are required to comply with the PCI security standards by September 2007. …

Securing both Merchant and Customer data
This white paper introduces the Payment Card Industry Compliance standard, and the security threats which brought about the need to standardize the data protection of both merchants and customers. The …

This paper reviews AJAX technologies with specific reference to JavaScript and Ajax Security.  It briefly documents the kinds of vulnerability classes that should raise security concerns among developers, website owners and the respective visitors. The …

A practical “how to” using Acunetix Web Vulnerability Scanner – Auditing the security of your website with Acunetix WVS is easy. Acunetix WVS performs most of the steps in an automated manner and therefore giving …

This white paper looks at some of the issues that should be considered every time a PHP script is written. Problems such as SQL Injections, Directory Traversal and other technical vulnerabilities, with well-designed code and …