diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..0e98f99 --- /dev/null +++ b/.gitignore @@ -0,0 +1,2 @@ +*.log +*.aux diff --git a/relatorio/relatorio.aux b/relatorio/relatorio.aux index eaaea75..8d57394 100644 --- a/relatorio/relatorio.aux +++ b/relatorio/relatorio.aux @@ -6,3 +6,34 @@ \providecommand\HyField@AuxAddToFields[1]{} \providecommand\HyField@AuxAddToCoFields[2]{} \babel@aux{portuguese}{} +\@writefile{toc}{\contentsline {section}{\numberline {1}Introduction}{4}{section.1}\protected@file@percent } +\@writefile{toc}{\contentsline {section}{\numberline {2}Arquitecture considered for both stages}{4}{section.2}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {2.1}Network structure}{4}{subsection.2.1}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {2.2}Servers}{4}{subsection.2.2}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {2.3}Services}{4}{subsection.2.3}\protected@file@percent } +\@writefile{toc}{\contentsline {section}{\numberline {3}Web application security testing}{6}{section.3}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {3.1}Information Gathering}{6}{subsection.3.1}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {3.2}Configuration and Deployment Management Testing}{6}{subsection.3.2}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {3.3}Identity Management Testing}{6}{subsection.3.3}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {3.4}Authentication Testing}{6}{subsection.3.4}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {3.5}Authorization Testing}{6}{subsection.3.5}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {3.6}Session Management Testing}{6}{subsection.3.6}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {3.7}Input Validation Testing}{6}{subsection.3.7}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {3.8}Testing for Error Handling}{6}{subsection.3.8}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {3.9}Testing for Weak Cryptography}{6}{subsection.3.9}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {3.10}Business Logic Testing}{6}{subsection.3.10}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {3.11}Client Side Testing}{6}{subsection.3.11}\protected@file@percent } +\@writefile{toc}{\contentsline {section}{\numberline {4}Web application security firewall}{6}{section.4}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {4.1}Information Gathering}{6}{subsection.4.1}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {4.2}Configuration and Deployment Management Testing}{6}{subsection.4.2}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {4.3}Identity Management Testing}{6}{subsection.4.3}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {4.4}Authentication Testing}{6}{subsection.4.4}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {4.5}Authorization Testing}{6}{subsection.4.5}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {4.6}Session Management Testing}{6}{subsection.4.6}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {4.7}Input Validation Testing}{6}{subsection.4.7}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {4.8}Testing for Error Handling}{6}{subsection.4.8}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {4.9}Testing for Weak Cryptography}{6}{subsection.4.9}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {4.10}Business Logic Testing}{6}{subsection.4.10}\protected@file@percent } +\@writefile{toc}{\contentsline {subsection}{\numberline {4.11}Client Side Testing}{6}{subsection.4.11}\protected@file@percent } +\@writefile{toc}{\contentsline {section}{\numberline {5}Conclusions}{6}{section.5}\protected@file@percent } +\gdef \@abspage@last{6} diff --git a/relatorio/relatorio.log b/relatorio/relatorio.log index f84a692..ff94ee5 100644 --- a/relatorio/relatorio.log +++ b/relatorio/relatorio.log @@ -1,4 +1,4 @@ -This is pdfTeX, Version 3.141592653-2.6-1.40.29 (TeX Live 2026/Arch Linux) (preloaded format=pdflatex 2026.5.3) 18 MAY 2026 11:45 +This is pdfTeX, Version 3.141592653-2.6-1.40.29 (TeX Live 2026/Arch Linux) (preloaded format=pdflatex 2026.5.3) 29 MAY 2026 20:44 entering extended mode restricted \write18 enabled. %&-line parsing enabled. @@ -1152,945 +1152,51 @@ LaTeX Font Info: Font shape `T1/Raleway-OsF/bold/n' aliased to (Font) `T1/Raleway-OsF/b/n' on input line 2. LaTeX Font Info: Font shape `T1/Raleway-OsF/b/n' will be (Font) scaled to size 10.95pt on input line 2. -) + [2]) \tf@toc=\write5 \openout5 = `relatorio.toc'. - [2] -! Illegal parameter number in definition of \GetTitleStringResult. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -? -! Interruption. - Arquitecture considered for the PA##3 - (for both scenarios 1 and 2) -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -? ^^X -Type to proceed, S to scroll future error messages, -R to run without stopping, Q to run quietly, -I to insert something, E to edit your file, -H for help, X to quit. -? -! Illegal parameter number in definition of \GTS@GlobalString. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -? -! You can't use `macro parameter character #' in horizontal mode. - Arquitecture considered for the PA## - 3 (for both scenarios 1 and 2) -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -? q -OK, entering \batchmode... -! Illegal parameter number in definition of \Hy@tempa. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@A. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \Hy@temp@B. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - } -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -You meant to type ## instead of #, right? -Or maybe a } was forgotten somewhere earlier, and things -are all screwed up? I'm going to assume that you meant ##. - -! Illegal parameter number in definition of \HyPsd@String. - - 3 -l.24 ...for the PA#3 (for both scenarios 1 and 2)} - -(That makes 100 errors; please try again.) + [3] +LaTeX Font Info: Font shape `T1/Raleway-OsF/m/it' will be +(Font) scaled to size 10.95pt on input line 29. +LaTeX Font Info: Font shape `T1/Raleway-OsF/bold/n' aliased to +(Font) `T1/Raleway-OsF/b/n' on input line 39. +LaTeX Font Info: Font shape `T1/Raleway-OsF/b/n' will be +(Font) scaled to size 12.0pt on input line 39. + [4] [5] +Overfull \vbox (94.49081pt too high) has occurred while \output is active [] + + +[6] (./relatorio.aux) + *********** +LaTeX2e <2025-11-01> +L3 programming layer <2026-01-19> + *********** + + +Package rerunfilecheck Warning: File `relatorio.out' has changed. +(rerunfilecheck) Rerun to get outlines right +(rerunfilecheck) or use package `bookmark'. + +Package rerunfilecheck Info: Checksums for `relatorio.out': +(rerunfilecheck) Before: 68C09B72EB016927D4630ABA0EA0F878;5628 +(rerunfilecheck) After: 5516AC32106F7B35E157AD6E76BFE99C;5471. + ) Here is how much of TeX's memory you used: - 31057 strings out of 469495 - 615751 string characters out of 5470099 - 1044632 words of memory out of 5000000 - 59160 multiletter control sequences out of 15000+600000 - 739119 words of font info for 79 fonts, out of 8000000 for 9000 + 31095 strings out of 469495 + 616384 string characters out of 5470099 + 1049626 words of memory out of 5000000 + 59177 multiletter control sequences out of 15000+600000 + 774125 words of font info for 83 fonts, out of 8000000 for 9000 16 hyphenation exceptions out of 8191 - 113i,6n,122p,467b,513s stack positions out of 10000i,1000n,20000p,200000b,200000s + 113i,6n,122p,467b,639s stack positions out of 10000i,1000n,20000p,200000b,200000s + +Output written on relatorio.pdf (6 pages, 50023 bytes). +PDF statistics: + 251 PDF objects out of 1000 (max. 8388607) + 210 compressed objects within 3 object streams + 38 named destinations out of 1000 (max. 500000) + 397 words of extra memory for PDF output out of 10000 (max. 10000000) -! ==> Fatal error occurred, no output PDF file produced! diff --git a/relatorio/relatorio.out b/relatorio/relatorio.out index e69de29..db354d7 100644 --- a/relatorio/relatorio.out +++ b/relatorio/relatorio.out @@ -0,0 +1,30 @@ +\BOOKMARK [1][-]{section.1}{\376\377\000I\000n\000t\000r\000o\000d\000u\000c\000t\000i\000o\000n}{}% 1 +\BOOKMARK [1][-]{section.2}{\376\377\000A\000r\000q\000u\000i\000t\000e\000c\000t\000u\000r\000e\000\040\000c\000o\000n\000s\000i\000d\000e\000r\000e\000d\000\040\000f\000o\000r\000\040\000b\000o\000t\000h\000\040\000s\000t\000a\000g\000e\000s}{}% 2 +\BOOKMARK [2][-]{subsection.2.1}{\376\377\000N\000e\000t\000w\000o\000r\000k\000\040\000s\000t\000r\000u\000c\000t\000u\000r\000e}{section.2}% 3 +\BOOKMARK [2][-]{subsection.2.2}{\376\377\000S\000e\000r\000v\000e\000r\000s}{section.2}% 4 +\BOOKMARK [2][-]{subsection.2.3}{\376\377\000S\000e\000r\000v\000i\000c\000e\000s}{section.2}% 5 +\BOOKMARK [1][-]{section.3}{\376\377\000W\000e\000b\000\040\000a\000p\000p\000l\000i\000c\000a\000t\000i\000o\000n\000\040\000s\000e\000c\000u\000r\000i\000t\000y\000\040\000t\000e\000s\000t\000i\000n\000g}{}% 6 +\BOOKMARK [2][-]{subsection.3.1}{\376\377\000I\000n\000f\000o\000r\000m\000a\000t\000i\000o\000n\000\040\000G\000a\000t\000h\000e\000r\000i\000n\000g}{section.3}% 7 +\BOOKMARK [2][-]{subsection.3.2}{\376\377\000C\000o\000n\000f\000i\000g\000u\000r\000a\000t\000i\000o\000n\000\040\000a\000n\000d\000\040\000D\000e\000p\000l\000o\000y\000m\000e\000n\000t\000\040\000M\000a\000n\000a\000g\000e\000m\000e\000n\000t\000\040\000T\000e\000s\000t\000i\000n\000g}{section.3}% 8 +\BOOKMARK [2][-]{subsection.3.3}{\376\377\000I\000d\000e\000n\000t\000i\000t\000y\000\040\000M\000a\000n\000a\000g\000e\000m\000e\000n\000t\000\040\000T\000e\000s\000t\000i\000n\000g}{section.3}% 9 +\BOOKMARK [2][-]{subsection.3.4}{\376\377\000A\000u\000t\000h\000e\000n\000t\000i\000c\000a\000t\000i\000o\000n\000\040\000T\000e\000s\000t\000i\000n\000g}{section.3}% 10 +\BOOKMARK [2][-]{subsection.3.5}{\376\377\000A\000u\000t\000h\000o\000r\000i\000z\000a\000t\000i\000o\000n\000\040\000T\000e\000s\000t\000i\000n\000g}{section.3}% 11 +\BOOKMARK [2][-]{subsection.3.6}{\376\377\000S\000e\000s\000s\000i\000o\000n\000\040\000M\000a\000n\000a\000g\000e\000m\000e\000n\000t\000\040\000T\000e\000s\000t\000i\000n\000g}{section.3}% 12 +\BOOKMARK [2][-]{subsection.3.7}{\376\377\000I\000n\000p\000u\000t\000\040\000V\000a\000l\000i\000d\000a\000t\000i\000o\000n\000\040\000T\000e\000s\000t\000i\000n\000g}{section.3}% 13 +\BOOKMARK [2][-]{subsection.3.8}{\376\377\000T\000e\000s\000t\000i\000n\000g\000\040\000f\000o\000r\000\040\000E\000r\000r\000o\000r\000\040\000H\000a\000n\000d\000l\000i\000n\000g}{section.3}% 14 +\BOOKMARK [2][-]{subsection.3.9}{\376\377\000T\000e\000s\000t\000i\000n\000g\000\040\000f\000o\000r\000\040\000W\000e\000a\000k\000\040\000C\000r\000y\000p\000t\000o\000g\000r\000a\000p\000h\000y}{section.3}% 15 +\BOOKMARK [2][-]{subsection.3.10}{\376\377\000B\000u\000s\000i\000n\000e\000s\000s\000\040\000L\000o\000g\000i\000c\000\040\000T\000e\000s\000t\000i\000n\000g}{section.3}% 16 +\BOOKMARK [2][-]{subsection.3.11}{\376\377\000C\000l\000i\000e\000n\000t\000\040\000S\000i\000d\000e\000\040\000T\000e\000s\000t\000i\000n\000g}{section.3}% 17 +\BOOKMARK [1][-]{section.4}{\376\377\000W\000e\000b\000\040\000a\000p\000p\000l\000i\000c\000a\000t\000i\000o\000n\000\040\000s\000e\000c\000u\000r\000i\000t\000y\000\040\000f\000i\000r\000e\000w\000a\000l\000l}{}% 18 +\BOOKMARK [2][-]{subsection.4.1}{\376\377\000I\000n\000f\000o\000r\000m\000a\000t\000i\000o\000n\000\040\000G\000a\000t\000h\000e\000r\000i\000n\000g}{section.4}% 19 +\BOOKMARK [2][-]{subsection.4.2}{\376\377\000C\000o\000n\000f\000i\000g\000u\000r\000a\000t\000i\000o\000n\000\040\000a\000n\000d\000\040\000D\000e\000p\000l\000o\000y\000m\000e\000n\000t\000\040\000M\000a\000n\000a\000g\000e\000m\000e\000n\000t\000\040\000T\000e\000s\000t\000i\000n\000g}{section.4}% 20 +\BOOKMARK [2][-]{subsection.4.3}{\376\377\000I\000d\000e\000n\000t\000i\000t\000y\000\040\000M\000a\000n\000a\000g\000e\000m\000e\000n\000t\000\040\000T\000e\000s\000t\000i\000n\000g}{section.4}% 21 +\BOOKMARK [2][-]{subsection.4.4}{\376\377\000A\000u\000t\000h\000e\000n\000t\000i\000c\000a\000t\000i\000o\000n\000\040\000T\000e\000s\000t\000i\000n\000g}{section.4}% 22 +\BOOKMARK [2][-]{subsection.4.5}{\376\377\000A\000u\000t\000h\000o\000r\000i\000z\000a\000t\000i\000o\000n\000\040\000T\000e\000s\000t\000i\000n\000g}{section.4}% 23 +\BOOKMARK [2][-]{subsection.4.6}{\376\377\000S\000e\000s\000s\000i\000o\000n\000\040\000M\000a\000n\000a\000g\000e\000m\000e\000n\000t\000\040\000T\000e\000s\000t\000i\000n\000g}{section.4}% 24 +\BOOKMARK [2][-]{subsection.4.7}{\376\377\000I\000n\000p\000u\000t\000\040\000V\000a\000l\000i\000d\000a\000t\000i\000o\000n\000\040\000T\000e\000s\000t\000i\000n\000g}{section.4}% 25 +\BOOKMARK [2][-]{subsection.4.8}{\376\377\000T\000e\000s\000t\000i\000n\000g\000\040\000f\000o\000r\000\040\000E\000r\000r\000o\000r\000\040\000H\000a\000n\000d\000l\000i\000n\000g}{section.4}% 26 +\BOOKMARK [2][-]{subsection.4.9}{\376\377\000T\000e\000s\000t\000i\000n\000g\000\040\000f\000o\000r\000\040\000W\000e\000a\000k\000\040\000C\000r\000y\000p\000t\000o\000g\000r\000a\000p\000h\000y}{section.4}% 27 +\BOOKMARK [2][-]{subsection.4.10}{\376\377\000B\000u\000s\000i\000n\000e\000s\000s\000\040\000L\000o\000g\000i\000c\000\040\000T\000e\000s\000t\000i\000n\000g}{section.4}% 28 +\BOOKMARK [2][-]{subsection.4.11}{\376\377\000C\000l\000i\000e\000n\000t\000\040\000S\000i\000d\000e\000\040\000T\000e\000s\000t\000i\000n\000g}{section.4}% 29 +\BOOKMARK [1][-]{section.5}{\376\377\000C\000o\000n\000c\000l\000u\000s\000i\000o\000n\000s}{}% 30 diff --git a/relatorio/relatorio.pdf b/relatorio/relatorio.pdf new file mode 100644 index 0000000..c607913 Binary files /dev/null and b/relatorio/relatorio.pdf differ diff --git a/relatorio/relatorio.tex b/relatorio/relatorio.tex index efc59e9..54c1666 100644 --- a/relatorio/relatorio.tex +++ b/relatorio/relatorio.tex @@ -21,35 +21,83 @@ \newpage \section{Introduction} -\section{Arquitecture considered for the PA#3 (for both scenarios 1 and 2)} +Este trabalho tem como objectivo realizar testes de penetração numa aplicação cobaia (o Juicebox) +desenhada para aprendizagem. + +\section{Arquitecture considered for both stages} + +Utilizamos somente duas máquinas virtuais: um servidor a correr \textit{CentOS 9} +e um cliente a correr \textit{Kali Linux.} O servidor contém o serviço \textit{Apache} +que age como \textit{firewall} através do plugin \textit{ModSecurity} e um servidor +nodejs que contém o Juicebox; a aplicação que vai servir de ``dummy'' (cobaia). + +Vão ser realizadas duas etapas de testes: primeiro, sem WAF (\textit{Web Application Firewall}) +e com foco em explorar vulnerabilidades na aplicação; e depois com uma WAF desenhada para sobreviver +as várias vulnerabilidades que foram encontradas na etapa anterior. + + \subsection{Network structure} +% 10.60.0.0 - rede externa +% 20.60.0.0 - rede interna + \subsection{Servers} +% 10.60.0.1 - router +% 20.60.0.2 - client + +O router contém a firewall e o serviço juicebox. + \subsection{Services} +% juicebox - port 3000 +Juicebox no port 3000 \section{Web application security testing} + \subsection{Information Gathering} + \subsection{Configuration and Deployment Management Testing} + \subsection{Identity Management Testing} + \subsection{Authentication Testing} + \subsection{Authorization Testing} + \subsection{Session Management Testing} + \subsection{Input Validation Testing} + \subsection{Testing for Error Handling} + \subsection{Testing for Weak Cryptography} + \subsection{Business Logic Testing} + \subsection{Client Side Testing} + \section{Web application security firewall} + \subsection{Information Gathering} + \subsection{Configuration and Deployment Management Testing} + \subsection{Identity Management Testing} + \subsection{Authentication Testing} + \subsection{Authorization Testing} + \subsection{Session Management Testing} + \subsection{Input Validation Testing} + \subsection{Testing for Error Handling} + \subsection{Testing for Weak Cryptography} + \subsection{Business Logic Testing} + \subsection{Client Side Testing} + \section{Conclusions} diff --git a/relatorio/relatorio.toc b/relatorio/relatorio.toc index e69de29..2563a7c 100644 --- a/relatorio/relatorio.toc +++ b/relatorio/relatorio.toc @@ -0,0 +1,31 @@ +\babel@toc {portuguese}{}\relax +\contentsline {section}{\numberline {1}Introduction}{4}{section.1}% +\contentsline {section}{\numberline {2}Arquitecture considered for both stages}{4}{section.2}% +\contentsline {subsection}{\numberline {2.1}Network structure}{4}{subsection.2.1}% +\contentsline {subsection}{\numberline {2.2}Servers}{4}{subsection.2.2}% +\contentsline {subsection}{\numberline {2.3}Services}{4}{subsection.2.3}% +\contentsline {section}{\numberline {3}Web application security testing}{6}{section.3}% +\contentsline {subsection}{\numberline {3.1}Information Gathering}{6}{subsection.3.1}% +\contentsline {subsection}{\numberline {3.2}Configuration and Deployment Management Testing}{6}{subsection.3.2}% +\contentsline {subsection}{\numberline {3.3}Identity Management Testing}{6}{subsection.3.3}% +\contentsline {subsection}{\numberline {3.4}Authentication Testing}{6}{subsection.3.4}% +\contentsline {subsection}{\numberline {3.5}Authorization Testing}{6}{subsection.3.5}% +\contentsline {subsection}{\numberline {3.6}Session Management Testing}{6}{subsection.3.6}% +\contentsline {subsection}{\numberline {3.7}Input Validation Testing}{6}{subsection.3.7}% +\contentsline {subsection}{\numberline {3.8}Testing for Error Handling}{6}{subsection.3.8}% +\contentsline {subsection}{\numberline {3.9}Testing for Weak Cryptography}{6}{subsection.3.9}% +\contentsline {subsection}{\numberline {3.10}Business Logic Testing}{6}{subsection.3.10}% +\contentsline {subsection}{\numberline {3.11}Client Side Testing}{6}{subsection.3.11}% +\contentsline {section}{\numberline {4}Web application security firewall}{6}{section.4}% +\contentsline {subsection}{\numberline {4.1}Information Gathering}{6}{subsection.4.1}% +\contentsline {subsection}{\numberline {4.2}Configuration and Deployment Management Testing}{6}{subsection.4.2}% +\contentsline {subsection}{\numberline {4.3}Identity Management Testing}{6}{subsection.4.3}% +\contentsline {subsection}{\numberline {4.4}Authentication Testing}{6}{subsection.4.4}% +\contentsline {subsection}{\numberline {4.5}Authorization Testing}{6}{subsection.4.5}% +\contentsline {subsection}{\numberline {4.6}Session Management Testing}{6}{subsection.4.6}% +\contentsline {subsection}{\numberline {4.7}Input Validation Testing}{6}{subsection.4.7}% +\contentsline {subsection}{\numberline {4.8}Testing for Error Handling}{6}{subsection.4.8}% +\contentsline {subsection}{\numberline {4.9}Testing for Weak Cryptography}{6}{subsection.4.9}% +\contentsline {subsection}{\numberline {4.10}Business Logic Testing}{6}{subsection.4.10}% +\contentsline {subsection}{\numberline {4.11}Client Side Testing}{6}{subsection.4.11}% +\contentsline {section}{\numberline {5}Conclusions}{6}{section.5}% diff --git a/relatorio/texput.log b/relatorio/texput.log new file mode 100644 index 0000000..3d317d4 --- /dev/null +++ b/relatorio/texput.log @@ -0,0 +1,21 @@ +This is pdfTeX, Version 3.141592653-2.6-1.40.29 (TeX Live 2026/Arch Linux) (preloaded format=pdflatex 2026.5.3) 29 MAY 2026 20:43 +entering extended mode + restricted \write18 enabled. + %&-line parsing enabled. +** + +! Emergency stop. +<*> + +End of file on the terminal! + + +Here is how much of TeX's memory you used: + 4 strings out of 469495 + 118 string characters out of 5470099 + 433756 words of memory out of 5000000 + 28764 multiletter control sequences out of 15000+600000 + 627721 words of font info for 40 fonts, out of 8000000 for 9000 + 16 hyphenation exceptions out of 8191 + 0i,0n,0p,1b,6s stack positions out of 10000i,1000n,20000p,200000b,200000s +! ==> Fatal error occurred, no output PDF file produced!