This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Testing for Oracle"
(→Brief Summary) |
(→Black Box testing and example) |
||
Line 13: | Line 13: | ||
== Black Box testing and example == | == Black Box testing and example == | ||
− | '''Testing for | + | '''Testing for Weak Account Passwords:''' <br> |
...<br> | ...<br> | ||
'''Result Expected:'''<br> | '''Result Expected:'''<br> | ||
...<br><br> | ...<br><br> | ||
+ | '''Testing for Communication infrastructure & Availability:''' <br> | ||
+ | ...<br> | ||
+ | '''Result Expected:'''<br> | ||
+ | ...<br><br> | ||
+ | |||
== Gray Box testing and example == | == Gray Box testing and example == | ||
'''Testing for Topic X vulnerabilities:'''<br> | '''Testing for Topic X vulnerabilities:'''<br> |
Revision as of 11:41, 28 November 2006
[Up]
OWASP Testing Guide v2 Table of Contents
Brief Summary
Testing an Oracle database server can be very beneficial to the security of the application. It is common that the database port (E.g. 1521) is protected by the firewall but can be accessible on the internal LAN. If the Oracle database is not hardened internal "insider attacks" may occur.
Description of the Issue
...here: Short Description of the Issue: Topic and Explanation
Black Box testing and example
Testing for Weak Account Passwords:
...
Result Expected:
...
Testing for Communication infrastructure & Availability:
...
Result Expected:
...
Gray Box testing and example
Testing for Topic X vulnerabilities:
...
Result Expected:
...
References
Whitepapers
...
Tools
...
OWASP Testing Guide v2
Here is the OWASP Testing Guide v2 Table of Contents