Yorkville High School Computer Science

Computer Security :: Projects :: Secure Web App

Problem

Your task is to examine a web app currently being used in Yorkville for security holes. You should look for avenues for SQL injection, XSS, and upload vector exploits. You should also ensure that any sensitive information is encrypted or hashed.

While the web app you are assigned may not have all of the security issues listed above, you still need to explain why it is secure if there is nothing for you to fix.

Instructions

1. Investigate your given web app for SQL injection opportunities. Write your findings in a Google Doc and fix any exploits you discover.
2. Investigate your given web app for cross site scripting opportunities. Write your findings in a Google Doc and fix any exploits you discover.
3. Investigate your given web app for upload vectors. Write your findings in a Google Doc and fix any exploits you discover.
4. Investigate your given web app for data that should be secured by a hash or encryption. Write your findings in a Google Doc and implement the hash or encryption.