Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 34 guests online
 
Advertisement

You are here: Home
EH-Net
May 24, 2013, 09:14:50 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
  Home Help Calendar Login Register  
  Show Posts
Pages: [1]
1  Ethical Hacking Discussions and Related Certifications / Web Applications / Re: Zend Framwork - Pentest on: January 29, 2012, 02:40:56 AM
I'm not sure how much this will help . but in to knowledge Zend Core Framework is pretty secured, once I did a pentest on a Zend . their was not much exploit . but I found some XSS , and Redirection flows and miss functions in vote poll . all because of poor verification on submitions

@nytfox Ahh great thanks mate that is just the stuff I was looking for!

@Jamie.R and @MaXe Thanks for your advice, but your advice is more applicable to PHP in general. OWASP Top 10 and default installation failures are pretty common in the default PHP install. But I am really looking for issues that Zend framework based apps have. Still thanks for your comment though!

LeDieu
2  Ethical Hacking Discussions and Related Certifications / Web Applications / Zend Framwork - Pentest on: January 14, 2012, 08:08:09 AM
Hi there,

Soon i'll be performing an pentest on a webapplication that has been build using the Zend framework.
Are there any suggestions what I should look for besides the normal web vulnerabilities? So anything in particular related to the Zend framework?

Cheers.
LeDieu.
Pages: [1]
Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.068 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.