slides - owasp

More documents

Recommendations

Info

Server Side Attacks www.foundstone.com © 2010, McAfee, Inc.
CAPTCHA Rainbow Tables Implementation Flaws CAPTCHAs are not generated at runtime Limited number of CAPTCHAs CAPTCHAs are assigned static index values to be referenced for verification and assignment Observations • One of the most popular implementation • Seen On very high traffic websites www.foundstone.com © 2010, McAfee, Inc.
Page 1 and 2: Attacking CAPTCHAs for Fun and Prof
Page 3 and 4: Research Scope Quantcast Top 1 Mill
Page 5 and 6: From Here On… Breaching the Clien
Page 7 and 8: Hidden Fields, Client Side Storage
Page 9: Arithmetic CAPTCHAs www.foundstone.
Page 13 and 14: CAPTCHA Rainbow Tables Attacking St
Page 15 and 16: CAPTCHA Rainbow Tables Dynamic Iden
Page 17 and 18: CAPTCHA Fixation Attack Client 1 GE
Page 19 and 20: Persistent CAPTCHAs Same CAPTCHA wa
Page 21 and 22: In Session CAPTCHA Brute-Force Clie
Page 23 and 24: OCR Assisted CAPTCHA Brute-Force So
Page 25 and 26: The Victims www.foundstone.com © 2
Page 27 and 28: TesserCap Introduction Retrieve CAP
Page 29 and 30: Spatial Filters This Image: Digital
Page 31 and 32: TesserCap Results CAPTCHA Provider
Page 33 and 34: Let’s Play Nice a.k.a. Conclusion
Page 35 and 36: A Secure CAPTCHA Implementation No
Page 37: Thank You! Gursev Singh Kalra (@igu

slides - owasp

Create successful ePaper yourself

Delete template?

Save as template?