slides - owasp
slides - owasp
slides - owasp
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
CAPTCHAs: More Than Just the<br />
Image<br />
Client<br />
1 GET /register.php<br />
Server<br />
... … 3<br />
4 GET /captcha.php + SESSIONID<br />
Return the CAPTCHA<br />
6<br />
POST /verify.php + CAPTCHA Solution + Form Fields<br />
7<br />
2<br />
5<br />
Create a<br />
SESSIONID for<br />
the current<br />
registration<br />
request<br />
Generate a<br />
random<br />
CAPTCHA and<br />
store in HTTP<br />
Session<br />
8<br />
Verify solution<br />
9<br />
www.foundstone.com<br />
© 2010, McAfee, Inc.