Scribd Logo
Upload

Welcome to Scribd!

  • 104 Open Redirects Hashing With Salt

    Uploaded by

    dilom
    10 views4 pages
    The document discusses web application pentesting and describes how hashing URLs with cryptographic salt can help mitigate open redirect vulnerabilities. It notes that salt can be either static/rotated and not transmitted, or random and included as a parameter in the URL before hashing to strengthen security. The document also advertises certification courses and training resources on pentesting from Pentester Academy and SecurityTube.net.

    Original Description:

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document discusses web application pentesting and describes how hashing URLs with cryptographic salt can help mitigate open redirect vulnerabilities. It notes that salt can be either static/rotated and not transmitted, or random and included as a parameter in the URL before hashing to strengthen security. The document also advertises certification courses and training resources on pentesting from Pentester Academy and SecurityTube.net.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    10 views4 pages

    104 Open Redirects Hashing With Salt

    Uploaded by

    dilom
    The document discusses web application pentesting and describes how hashing URLs with cryptographic salt can help mitigate open redirect vulnerabilities. It notes that salt can be either static/rotated and not transmitted, or random and included as a parameter in the URL before hashing to strengthen security. The document also advertises certification courses and training resources on pentesting from Pentester Academy and SecurityTube.net.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 4

    Web Application Pentesting

    Vivek Ramachandran
    SWSE, SMFE, SPSE, SISE, SLAE, SGDE Course Instructor

    Certifications: http://www.securitytube-training.com

    Pentester Academy: http://www.PentesterAcademy.com

    ©SecurityTube.net
    Open Redirects: Hashing with Salt

    ©SecurityTube.net
    Hashing with Salt

    • Crypto Salt can be prepended/appended to


    the URL before hashing

    • Salt can be
    – Static/Rotated and not transmitted
    – Random and part of the URL params

    ©SecurityTube.net
    Pentester Academy

    ©SecurityTube.net

    You might also like