View difference between Paste ID: VnxVVAiu and L2rCvk5q

-####################
+#######################################
-# Ultimate App Sec #
+# Source Code Analysis For Pentesters #
-####################
+#######################################
 
 The video from the previous version of the class:
 https://s3.amazonaws.com/StrategicSec-Videos/2015/2015-12-30+09.08+Source+Code+Analysis+For+Pentesters.mp4
 
-http://www.slideshare.net/akilan27/ilugc-curl
+
-http://www.slideshare.net/cory_scott/tactical-application-security-getting-stuff-done-black-hat-briefings-2015
+Day 1 Class video:
 https://s3.amazonaws.com/StrategicSec-Videos/2016/SourceCodeAnalysisForPentesters/2016-10-31+19.33+Source+Code+Analysis+For+Pentesters.mp4
 
-Download the course lab manual:
+
-https://s3.amazonaws.com/StrategicSec-Files/UltimateAppSec/Ultimate-App-Sec-V2.pdf
+
 https://s3.amazonaws.com/StrategicSec-Files/UltimateAppSec/UltimateAppSec-Week1.pptx
 
-Day 1 (12 Oct class video):
+
-https://s3.amazonaws.com/StrategicSec-Videos/UltimateAppSec/2015-10-12+18.03+Ultimate+Web+App+Sec.mp4
+
 
 
-Day 2 (14 Oct class video):
+
-https://s3.amazonaws.com/StrategicSec-Videos/UltimateAppSec/2015-10-14+18.03+Ultimate+Web+App+Sec.mp4
+				Latin (romance language)	C
 
 
-Day 3 (21 Oct class video):
+Spanish		Italian		French		Portugese		Romainian
-https://s3.amazonaws.com/StrategicSec-Videos/UltimateAppSec/2015-10-21+18.07+Ultimate+Web+App+Sec.mp4
+
 
 
-Day 4: (9 Nov class video):
+C++		Java		PHP		Perl			C#
-https://s3.amazonaws.com/StrategicSec-Videos/UltimateAppSec/2015-11-09+18.08+Ultimate+Web+App+Sec.mp4
+
 
 Syntax (the way you say things changes between the languages)
-Web App Pentester Night School 2016
+
-https://s3.amazonaws.com/StrategicSec-Videos/2016/2016-02-01+18.15+Web+App+Pentester+Night+School+January+2016.mp4
+
-https://s3.amazonaws.com/StrategicSec-Videos/2016/2016-02-03+18.10+Web+App+Pentester+Night+School+January+2016.mp4
+
 def salestax()
 	x * .07
 
 
 def propertytax()
 	x * .07
 
 
 
 1. Input validation
 	Make sure the data coming in is EXACTLY what you want
 
 2. Output validation
 	Make sure the data going is EXACTLY what you want
-Start with simple Firefox Addons:
+
 3. Session validation
-- ShowIP				https://addons.mozilla.org/en-US/firefox/addon/showip/
+	Make sure who's running it is EXACTLY who you expect to be running it
-- Server Spy			https://addons.mozilla.org/en-US/firefox/addon/server-spy/
+
-- FoxyProxy				https://addons.mozilla.org/en-US/firefox/addon/foxyproxy-standard/
+
-- Tamper Data			https://addons.mozilla.org/en-US/firefox/addon/tamper-data/
+
-- Wapalyzer				https://addons.mozilla.org/en-US/firefox/addon/wappalyzer/
+
 Homework:
-A good list of web app testing add ons for Firefox:
+Python video tutorial series (43 videos):
-https://addons.mozilla.org/en-us/firefox/collections/adammuntner/webappsec/
+https://www.youtube.com/playlist?list=PLEA1FEF17E1E5C0DA
 Your task is to create a word document with screenshots that proves you have performed 25 of the videos in the playlist listed above. Submit the results via email in an MS Word document with (naming convention example: YourFirstName-YourLastName-Source-Code-Analysis-For-Pentesters-Python-Homework.docx)
 
 
 C Programming video tutorial series (58 videos):
 https://www.youtube.com/playlist?list=PL6gx4Cwl9DGAKIXv8Yr6nhGJ9Vlcjyymq
 Your task is to create a word document with screenshots that proves you have performed 25 of the videos in the playlist listed above. Submit the results via email in an MS Word document with (naming convention example: YourFirstName-YourLastName-Source-Code-Analysis-For-Pentesters-C-Homework.docx)
 
-##################################
+
-# Basic: Web Application Testing #
+Java Programming video tutorial series (87 videos):
-##################################
+https://www.youtube.com/playlist?list=PLFE2CE09D83EE3E28
 Your task is to create a word document with screenshots that proves you have performed 25 of the videos in the playlist listed above. Submit the results via email in an MS Word document with (naming convention example: YourFirstName-YourLastName-Source-Code-Analysis-For-Pentesters-Java-Homework.docx)
-Most people are going to tell you reference the OWASP Testing guide.
+
-https://www.owasp.org/index.php/OWASP_Testing_Guide_v4_Table_of_Contents
+
 
-I'm not a fan of it for the purpose of actual testing. It's good for defining the scope of an assessment, and defining attacks, but not very good for actually attacking a website.
+
 ---------------------------------------------------------------------------------------------------------------------------
 
-The key to doing a Web App Assessment is to ask yourself the 3 web questions on every page in the site.
+
-
+VMWare & Class Virtual Machine
-	1. Does the website talk to a DB?
+------------------------------
-		- Look for parameter passing (ex: site.com/page.php?id=4)
+
-		- If yes - try SQL Injection
+
 
-	2. Can I or someone else see what I type?
+
-		- If yes - try XSS
+
 Download the course virtual machines:
-	3. Does the page reference a file?
+-------------------------------------
-		- If yes - try LFI/RFI
+
 username:    strategicsec
-Let's start with some manual testing against 54.213.252.28
+
 
 
-Start here:
+
-http://54.213.252.28/
+###############################################################
 # Rough Auditing Tool for Security (RATS)                     #
 # https://code.google.com/p/rough-auditing-tool-for-security/ #
-There's no parameter passing on the home page so the answer to question 1 is NO.
+###############################################################
-There is however a search box in the top right of the webpage, so the answer to question 2 is YES.
+cd ~/toolz
 mkdir rats
-Try an XSS in the search box on the home page:
+cd rats
-<script>alert(123);</script>
+wget https://rough-auditing-tool-for-security.googlecode.com/files/rats-2.4.tgz
 tar -zxvf rats-2.4.tgz
-Doing this gives us the following in the address bar:
+cd rats-2.4
-http://54.213.252.28/BasicSearch.aspx?Word=<script>alert(123);</script>
+./configure && make
 sudo make install
-Ok, so we've verified that there is XSS in the search box.
+
 
-Let's move on to the search box in the left of the page.
+
 rats -h
-Let's give the newsletter signup box a shot
+
 
-Moving on to the login page.
+# -i 'report functions that accept external input'
-http://54.213.252.28/login.aspx
+# -l 'force the specified langauge to be used' (perl, ruby, python, c, php)
 # --context 'Display the line of code that caused the problem report'
-I entered a single quote (') for both the user name and the password. I got the following error:
+# --resultsonly 'No header, footer, or status information'
 
------------------------------------------------------------------
+
- 'Users//User[@Name=''' and @Password=''']' has an invalid token.
+wget --no-check-certificate https://dl.packetstormsecurity.net/UNIX/scanners/propecia.c
-Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
+
 rats -i -l C --context propecia.c
-Exception Details: System.Xml.XPath.XPathException: 'Users//User[@Name=''' and @Password=''']' has an invalid token.
+
 
-Source Error:
+
 cd /home/strategicsec/toolz/rats/rats-2.4
 
-Line 112:            doc.Load(Server.MapPath("") + @"\AuthInfo.xml");
+ls | grep xml
-Line 113:            string credential = "Users//User[@Name='" + UserName + "' and @Password='" + Password + "']";
+
-Line 114:            XmlNodeList xmln = doc.SelectNodes(credential);
+cat rats-c.xml | less
-Line 115:            //String test = xmln.ToString();
+
-Line 116:            if (xmln.Count > 0)
+
 rats -i -l C --db rats-c.xml --context propecia.c
------------------------------------------------------------------
+
 rats -i -l C --context --resultsonly propecia.c
 
-Hmm....System.Xml.XPath.XPathException.....that's not SQL.
+rats -i -l Python --context --resultsonly ../../MultiInjector.py