EC-Council Certified Secure Programmer

More documents

Recommendations

Info

• Solution for Session ID Protection• Error Reporting• Data Handling Errors• Security Sensitive PHP Functions:File Functions• Security Sensitive PHP Functions: ezmlm_hash• PHP Exploitso Forms and Datao Semantic URL Attackso File Upload Attackso Cross-Site Scripting (CSS/XSS)o Cross-Site Request Forgerieso Spoofed Form Submissionso Spoofed HTTP Requestso Sessions and Cookieso Cookie Thefto Exposed Session Datao Session Fixationo Session Hijacking• PHP Vulnerabilitieso Informational Vulnerabilitieso Common File Name Vulnerabilityo Revealed Source Code Vulnerabilityo Revealing Error Message Vulnerabilityo Sensitive Data in Web Root Vulnerabilityo Session File in Shared Server Vulnerabilityo Sensitive Data in Globally Readable File Vulnerabilityo Revealing HTML Comment VulnerabilityPage 21http://www.eccouncil.org<strong>EC</strong>-<strong>Council</strong>
Page 1 and 2: Page 1EC-Council CertifiedSecure Pr
Page 3: Course DescriptionEC-Council Certif
Page 8 and 9: • Microsoft SDL Threat Modeling T
Page 11 and 12: • Countermeasure against Buffer O
Page 13 and 14: • Using Variable Arguments Proper
Page 15 and 16: o Code for GSS Client• Java Serve
Page 17 and 18: • .NET Frameworko .NET Framework
Page 19: o Design Considerationso Applicatio
Page 23 and 24: o Encryption Software: PHP Code Loc
Page 25 and 26: • Transact-SQL• Create Symmetri
Page 27 and 28: • Creating Test Strategy• Creat
Page 29 and 30: • Good Error Message Example• M
Page 31 and 32: • Setuid Commando Setuid Sample C
Page 33 and 34: • RPC Authentication Protocol•
Page 35 and 36: Module 20: Secure Linux Programming
Page 37 and 38: • Observing Network Traffic• De
Page 39 and 40: • SQL Injection Attacks• Defend
Page 41 and 42: • Securing Sockets:o Server Progr
Page 43 and 44: • Clean Port Binding Shellcodeo C
Page 45 and 46: • Introduction• Targeting Vulne
Page 47 and 48: o Determining Payload Variableso Ge
Page 49 and 50: • Writing Detection Plugins• Ne
Page 51 and 52: Module 30: Secure Game Designing•
Page 53 and 54: • Watermark System Design Issues
Page 55: © 2010 EC-Council. All rights rese

EC-Council Certified Secure Programmer

Create successful ePaper yourself

Delete template?

Save as template?