Penetration Testing Bootcamp

Validating data, error handling, and logic

Having your web application collect data is extremely important, as that is typically the main reason why there is a web application. But how the system handles that data is very important, especially to security professionals. Web applications need to be able to handle the data they get in, but how they react to the wrong data being entered is something we want to test as a penetration tester. Sometimes, unwanted things happen to web applications when the wrong data is entered, and we want to make sure this doesn't happen.

We also need to make sure the data that is displayed to the user is also correct. You don't want to give more information to a user than is necessary, or give information to that ...