Resource Injection  Revision as of 13:23, 4 July 2007 by Junior
(Talk | contribs)  Jump to: navigation, search  Resource
Injection    This attack consists in allow a user to alter/pass
resource identifiers may enabled an attacker access or modify
another any system resources protected  There are two conditions
for this attack be realize, the first way is system resource
identifier specified for an attacker; the second way is a
attacker specifying a resource, take permission enough, thing
that would not be possible.  Note: The resource injection attack
involves resources stored on filesystem, like the path
manipulation attack, even so they are separated by differenties
categories, see path manipulation attack for more details this
technique  External references  G. Hoglund and G. McGraw.
Exploiting Software. Addison-Wesley, 2004.   ‘’Example 1’’  This
is code is a java class whose is vulnerable to a resource
injection: 1. #import*; 2. 3. #public class ResourceInjection {
4. 5. # private static void test() { 6.