The Experts below are selected from a list of 42 Experts worldwide ranked by ideXlab platform

Jaya, Wayan Agung I P. - 095410229 - One of the best experts on this subject based on the ideXlab platform.

  • APLIKASI SCANNER WEB PADA CELAH local file inclusion MENGGUNAKAN PHP
    2013
    Co-Authors: Jaya, Wayan Agung I P. - 095410229
    Abstract:

    Hingga saat ini tindakan penyerangan terhadap suatu aplikasi web semakin meningkat. Sering terlihat di media elektronik begitu banyak berita yang memuat aksi-aksi penyerangan terhadap suatu situs web sehingga membuat para web developer harus lebih memperhatikan setiap baris listing mereka agar celah serangan local file inclusion dapat di tutup. Namun tetap saja itu tidak cukup tanpa adanya proses pengujian kelayakan web aplikasi. Scanner ini di buat dengan menggunakan bahasa pemrograman PHP yang berbasis online dengan tujuan untuk membantu mendeteksi celah keamanan web terhadap serangan local file inclusion. Pengujian di lakukan pada sebuah web dummie dan real di mana Scaning di lakukan pada url. Hasil output yang diberikan ialah berupa informasi URL yang memiliki celah LFI atau informasi bahwa web tersebut tidak memiliki celah LFI. Kata Kunci : local file inclusion, Web aplikasi, Hacking

Ibnu Gunawan - One of the best experts on this subject based on the ideXlab platform.

  • Website Application Security Scanner Using local file inclusion and Remote file inclusion
    2012
    Co-Authors: Agustinus Noertjahyana, Ibnu Gunawan
    Abstract:

    Today many web-based applications developed to be accessible via the internet. The problem that often occurs is commonly found on web application vulnerabilities. Many application developers often ignore security issues when developing applications that can cause substantial losses if a hacker manages to gain access to the system. A hacker can replace web pages, obtain sensitive information, or even take over control of the website. For that reason there is a need for applications that can help developers to overcome these problems. This application is expected to detect the vulnerabilities that exist on a website. Existing processes include: The process of crawling to get the whole link from target websites, attacking process is useful for testing the attacks, and the last is the process of displaying a report about the security hole on the website. This application is developed using Microsoft Visual C # 2010. Based on the results of tests made on this application, it can be concluded that the application can detect vulnerabilities in the website and report any form of link that has a security hole on the website.

Steven K. Ziegler - One of the best experts on this subject based on the ideXlab platform.

  • PHP Vulnerabilities in Web Servers Written By:
    2008
    Co-Authors: David K. Liefer, Steven K. Ziegler
    Abstract:

    The Internet has grown to be hugely popular and used by people of all different backgrounds and professions. Individual web pages are created by just about everyone whether or not they have any development experience or not. PHP (PHP: Hypertext Preprocessor) is one of the more popular scripting languages used by beginners and advanced users. It is an attractive alternative to Java for the novice user but little do they know there are some frightening vulnerabilities that can be exploited by clients looking to cause problems or gain access to private information or resources that cannot be tied to them. A few of these exploits include remote and local file inclusion or execution. Through these basics types of vulnerabilities a malicious client could gain complete access to a web server. To avoid these attacks a web developer needs to take care when writing PHP scripts. The most common mistake made by developers is to unknowingly expose internal variables to clients or when access is needed not properly sanitizing them to ensure the values make sense for the context in which they are being used. If un-sanitized variables are used in conjunction with certain PHP function calls private files can be accessed or remote files can be uploaded and executed. A few of the more dangerous PHP functions calls are _GET[] or passthru(). These functions need to be used with care or disabled by the system administrator to avoid problems with badly written PHP scripts. To aid in the detection of potential vulnerabilities the authors of this paper implemented a Vulnerability Detection Tool (VDT). The tool is a jav

Sasongko Luhur - One of the best experts on this subject based on the ideXlab platform.

  • aplikasi deteksi kelemahan website dengan menggunakanmetode injeksi remote file inclusion dan local file
    2012
    Co-Authors: Sasongko Luhur
    Abstract:

    ABSTRAK Dalam pembuatan Aplikasi Analisis Kelemahan Website Dengang Menggunakan Metode Injeksi Remote file inclusion dan local file Incluison ini dapat menscanning website dimana website tersebut mempunyai kerentaan terhadap injeksi remote file inclusion dan local file inclusion sehingga website tersebut dapat diperbaiki. Aplikasi ini menggunakan bahasa pemrograman perl dimana hanya tampilan text yang ditampilkan dalam pembuatan aplikasi ini. Tampilan pada aplikasi ini hanya sekedar text tanpa ada form-form karena menscanning vulnerable pada website target yang dituju. Dengan adanya aplikasi analisis kelemahan website menggunkaan metode injeksi remote file inclusion dan local file inclusion dapat memberikan informasi tentang bagaimana sebuah website target rentan terhadap injeksi remote file inclusion dan local file inclusion . Kata Kunci : Remote file inclusion dan local file inclusion, Perl.

Agustinus Noertjahyana - One of the best experts on this subject based on the ideXlab platform.

  • Website Application Security Scanner Using local file inclusion and Remote file inclusion
    2012
    Co-Authors: Agustinus Noertjahyana, Ibnu Gunawan
    Abstract:

    Today many web-based applications developed to be accessible via the internet. The problem that often occurs is commonly found on web application vulnerabilities. Many application developers often ignore security issues when developing applications that can cause substantial losses if a hacker manages to gain access to the system. A hacker can replace web pages, obtain sensitive information, or even take over control of the website. For that reason there is a need for applications that can help developers to overcome these problems. This application is expected to detect the vulnerabilities that exist on a website. Existing processes include: The process of crawling to get the whole link from target websites, attacking process is useful for testing the attacks, and the last is the process of displaying a report about the security hole on the website. This application is developed using Microsoft Visual C # 2010. Based on the results of tests made on this application, it can be concluded that the application can detect vulnerabilities in the website and report any form of link that has a security hole on the website.