Head
Logo


1. Authentication
  1. Brute Force

  2. Insufficient Authentication

  3. Weak Password Recovery Validation

2. Authorization
  1. Credential/Session Prediction

  2. Insufficient Authorization

  3. Insufficient Session Expiration

  4. Session Fixation

3. Client-side Attacks
  1. Content Spoofing

  2. Cross-site Scripting

4. Command Execution
  1. Buffer Overflow
  2. Format String Attack
  3. LDAP Injection
  4. OS Commanding
  5. SQL Injection
  6. SSI Injection
  7. XPath Injection
5. Information Disclosure
  1. Directory Indexing

  2. Information Leakage

  3. Path Traversal

  4. Predictable Resource Location

6. Logical Attacks
  1. Abuse of Functionality

  2. Denial of Service

  3. Insufficient Anti-automation

  4. Insufficient Process Validation

Contact Info:

InfoSecPro.com
P.O.Box 291
Purchase, NY 10577

U.S.A.

732-763-2814

tibi@infosecpro.com

An organization that has a web presence can not afford to have those systems compromised.

One protection against compromise is diligent testing that emulates the methods used by an attacker. InfoSecPro.com can work with you to develop a testing program using our attack expertise and professional reporting to reduce your web exposed attack profile.

Our vision is to partner with our customers to improve security with thorough testing and education. Our comprehensive assessment report is suitable for distribution to executive and technical level staff alike. Every report includes clear discussion of findings with methods of mitigation and a date line for the remedial action plan.

After receiving our vulnerability assessment service you will fully understand the attack exposure profile your web and network presents and how to reduce that attack exposure profile to acceptable levels for your business.

To receive your Free Application Vulnerability Assessment for testing of one attack vulnerability of your choice, please submit your payment of $99.00 for a second attack vulnerability test.

B E T T E R: Please submit your payment of $999.00 for a complete Application Vulnerability Assessment covering over 25 attack methods.

Business Name:
Contact Information:
Email Address:
URL or IP address:
  

Other members of our business group:
Kids' password | Buy-Business.us | WindPowerPro.us | Cheating Spouse | S.C.A.D.A. | Transportation Security | Temporary Employment

COPYRIGHT (C) 2000 - 2007 InfoSecPro.com ALL RIGHTS RESERVED