Finding Server-Side Endpoints with Static Analysis of Client-Side JavaScript

Sigalov, D.; Gamayunov, D.

Авторы: Sigalov Daniil, Gamayunov Dennis
Сборник: Computer Security. ESORICS 2023 International Workshops
Серия: Lecture Notes in Computer Science
Том: 14399
Год издания: 2024
Издательство: Springer Nature
Местоположение издательства: Switzerland
Первая страница: 442
Последняя страница: 458
DOI: 10.1007/978-3-031-54129-2_26
Аннотация: Determining server HTTP endpoints — essentially, revealing server’s attack surface — is a crucial step of every black-box web security scanner. An indispensable method of doing that is inferring server endpoints from client side, discovering what HTTP requests can be sent from client to server. This is easy for requests triggered by HTML markup elements, such as links and forms, but is difficult for requests sent by JavaScript. Existing approaches to determining requests sent from JavaScript are based on a technique known as dynamic crawling - automated interaction with web page elements using a headless browser. Dynamic crawling fails when the code that sends a request is impossible or very hard to trigger with interface interaction. We propose a different approach for finding HTTP requests sent by JS code, which uses static code analysis. While analyzing JavaScript statically is known to be hard and applying existing analyzers to real-world web pages usually does not work, we propose a new lightweight analysis algorithm that can work on pages of real websites, and can discover server endpoints that dynamic crawlers cannot. Evaluation results show that augmenting a black-box scanner with the proposed static analysis may significantly improve server-side endpoint coverage.
Добавил в систему: Гамаюнов Денис Юрьевич

	ИСТИНА	Войти в систему Регистрация
	ИСТИНА ФИЦ ПХФ и МХ РАН
	Главная Поиск Статистика О проекте Помощь

ИСТИНА

ИСТИНА ФИЦ ПХФ и МХ РАН

Finding Server-Side Endpoints with Static Analysis of Client-Side JavaScriptстатья

Прикрепленные файлы