Visit our Resources
Wir bauen echte Partnerschaften mit unseren Kunden auf
Auth checker panel
The auth checker panel is used in determining the authorisation of particular requests as different users. The auth checker has two proxies running on different port numbers. To use the tool two separate browsers (e.g. Firefox and IE) are configured to proxy through each port. The ‘low user’ then logs into the application with a low level of privileges than the ‘high user’, and the high user logs in with a high level of access. When both browsers are correctly configured and authenticated the ‘copy’ tick box is selected from either the main panel or the ‘minibar’ window. From this point the proxies are synchronised so that any action that the high user performs will be performed by the low user but with the low user’s cookie. For example if an admin user clicks on ‘manage users’ the high user will pause and wait for the low user (the lights will change to green when a user is paused and waiting for the other). Then a low user would click on any link within the application. This will result in the low user’s link replaced with the high users ‘mange user’ link and the low user would attempt to force browse to this area. This can be used with POST as well as GET requests to ensure that the ACLs are correctly implemented.
Wie wir helfen können
Wir sind ein eigenständiges Sicherheitsberatungsunterne-hmen, das sich auf den Bereich der technischen Sicherheit spezialisiert hat.
CAT
Unser Flagship-
Tool CAT ist für die
Ermittlung von
Anwendungsschwachstellen
bestens geeignet.
