Web Application Penetration Testing – Encoding

Web Application Penetration Testing – Encoding
Base64 Encoding Example by burp tool

Information encoding is to represent the low-level mapping of the information being handled. Understanding encoding schemes is big advantage during the detection and exploitation of vulnerabilities in web application penetration testing. Before we talk about encoding, firstly lets know what is a character set ? It is a set of characters symbol (what user see

Web Application Penetration Testing – HTTP Protocol

Web Application Penetration Testing – HTTP Protocol
HTTP Request and HTTP Response Headers

You can’t start web application penetration testing without studying the protocol that makes it happen, HTTP or its secure version HTTPS. So, What is HTTP Protocol ? HyperText Transfer Protocol, client-server protocol used to transfer web pages and web application data. The client and the server exchange messages [Clients Requests, server Responses] Web Clients: normally