diff --git a/content/notes/ass01-security-audit.md b/content/notes/ass01-security-audit.md new file mode 100644 index 000000000..3d94442b8 --- /dev/null +++ b/content/notes/ass01-security-audit.md @@ -0,0 +1,29 @@ +--- +title: "ass01-security-audit" +aliases: +tags: +- assignment +- comp210 +--- + + +Jet Hughes - 9474308 + +# Summary of system +- function +- technology + +# Flaws +## Password policy +- must have at least 5 characters and one digit. + - not suffiecient + +## SQL Injection +- can log in to admin using username: " 'or 1=1;--" +- we are able to extract data which is displayed as the users username +- + +## Javascript Injection +## Path traversal +## Network-Level security +## Other \ No newline at end of file