Invention Grant
US08239952B1 Method and system for detection of remote file inclusion vulnerabilities
有权
用于检测远程文件夹入漏洞的方法和系统
- Patent Title: Method and system for detection of remote file inclusion vulnerabilities
- Patent Title (中): 用于检测远程文件夹入漏洞的方法和系统
-
Application No.: US12024935Application Date: 2008-02-01
-
Publication No.: US08239952B1Publication Date: 2012-08-07
- Inventor: Brett Oliphant , Ben Tyler , Gabriel Richard Pack , Brett Hardin
- Applicant: Brett Oliphant , Ben Tyler , Gabriel Richard Pack , Brett Hardin
- Applicant Address: US CA Santa Clara
- Assignee: McAfee, Inc.
- Current Assignee: McAfee, Inc.
- Current Assignee Address: US CA Santa Clara
- Agency: Wong, Cabello, Lutsch, Rutherford & Brucculeri LLP
- Main IPC: G06F11/36
- IPC: G06F11/36 ; G06F12/14 ; G08B23/00
Abstract:
A method for detecting remote file inclusion vulnerabilities in a web application includes altering of extracted resource references from a web application, submission of altered references as HTTP requests to the web application, inspection of corresponding HTTP responses, and diagnosis of vulnerability. A system of invention implements the method.
Information query
