1. EECS 354: Network Security Group Members: Patrick Wong Eric Chan Shira Schneidman Web Attacks Project: Detecting XSS and SQL Injection Vulnerabilities

2. Web Attacks Overview Vulnerability to web attacks compromise the data and security of a computer network. They can bypass access controls, enable the viewing and theft of sensitive data, and result in financial loss. SQL Injection Manipulating the statements performed on a database by passing unfiltered user input into a SQL statement. Cross-Site Scripting (XSS) Injecting malicious code (often a client side scripting language, e.g. Javascript) into web pages viewed by other end-users, where “everything looks fine.”

3. Project Purpose Develop a tool that identifies XSS and SQL Injection vulnerabilities in the web forum assigned to us in the iCTF Competition. After scanning the VM’s source code files, this tool informs us of potential web attack vulnerabilities, so that we may: 1.Exploit these vulnerabilities in other teams’ forums 2.Patch our source files to prevent attacks on us Detecting XSS and SQL Injection Vulnerabilities

4. Project Obstacles Difficult to anticipate the different features of the VM: Type of forum and web server Amount of services and source files Amount and type of programming languages used to write source files (e.g. C++, Perl, Python, and Ruby) Detecting XSS and SQL Injection Vulnerabilities

5. Project Solution To anticipate the different features of the VM, this tool: Searches for all source code within the VM Examines the source code file suffix (e.g. pl, rb, py, php), and detects code abnormalities within the specific programming language To detect SQL injection vulnerabilities, this tool: Checks using regular expressions to identify special characters, such as '/[\'|\"]select|[\'|\"]SELECT/‘ Detecting XSS and SQL Injection Vulnerabilities

6. Project Solution To detect XSS vulnerabilities, this tool: Checks if user input variables are filtered for special scripting characters and words To learn how to exploit other teams’ VMs and defend ourselves, this tool: Outputs identified vulnerabilities within the source code Detecting XSS and SQL Injection Vulnerabilities

7. Tool Demo Detecting XSS and SQL Injection Vulnerabilities