seguridad en servicios web .net

www.somosdas.comC#.Net

SOAPVisual StudioAHM

UDDI XSS

XMLASP.Net

WSDL

•

•

•

•

•

•

•

Red

Red

Red

Red

Servidor

Frontal

Servidor de

Base de Datos

Servicios Web

Clientes

WSDL

XML

SOAP

Servicios Web

RESTFull para

dispositivos

móviles

1 2

3

4

56

7

http://www.gerentedenegocios.com/whmcs/knowledgebase.php?action=displayarticle&id=3

http://www.service-repository.com/

http://www.xmethods.com/ve2/index.po

http://www.webservicex.net/ws/WSDetails.aspx?CATID=12&WSID=56

http://pixelcoblog.com/14-servicios-web-

gratuitos-para-webmasters/#.U6A6_ZR5Oa9

Cliente Cliente

Servidor ApliccionesIIS

Apache

Tomcat, etc

Servidor de Base de Datos

Red

Red

SOAPWSDL

XMLUDDI

Ataque

Cliente Cliente

Servidor AplicacionesIIS

Apache

Tomcat, etc

Servidor de Base de Datos

Red

Red

Servidor Frontal

Red

Movil

SOAPWSDLXMLUDDI

Ataque

Ataque

DDoS

Xphat Injection

MiMt

SQL Injection

XSS

Xploints

XML InjectionRobo de Sesiones

Footpriting

FINGERPRITING

https://w3dt.net//tools/httpreconHTTPReconhttps://www.owasp.org/index.php/Main_Page

http://tools.whois.net/

FINGERPRITING

FINGERPRITING

http://www.blueinfy.com/tools.html

http://www.flu-project.com/p/anubis.html

FINGERPRITING

FINGERPRITING

FINGERPRITING

DoS [Denial of Service]

DoS [Denial of Service]

DoS [Denial of Service]

VICTIMA

INTERMEDIARIO -

VICTIMA

ATACANTE

DoS [Denial of Service]

Low Orbit Ion Cannon

http://anonopsibero.blogspot.com/p/loic-y-otro-

software.html#.U2P60IF5Oa8

Linux hping3 -q -n -S -i u4000 -p www.infocaloruro.org

DDoS

http://www.microsoft.com/es-es/security

DDoS

XPATH Injection

https://code.google.com/p/xpath-blind-explorer/downloads/list

XPATH Injection

XPATH Injection

XPATH Injection

XPATH Injection

XPATH Injection

www.somosdas.com

GRACIAS POR SU ATENCION

C#.NetPHP Visual Studio

Java

HTML 5 CSS 3

C/C++ASP.Net

Android