تست نشت Stack Trace

1# خطای SQL Injection
2https://target.com/search?q=' OR 1=1--
3
4# خطای Path Traversal
5https://target.com/download?file=../../../etc/passwd
6
7# خطای XML Injection
8https://target.com/api/xml -d '<?xml version="1.0"?><!DOCTYPE foo [<!ENTITY xxe SYSTEM "file:///etc/passwd">]><foo>&xxe;</foo>'
9
10# خطای JSON نامعتبر
11curl -X POST https://target.com/api/data -H 'Content-Type: application/json' -d '{invalid json}'

1java.lang.NullPointerException: Cannot invoke method on null object
2    at com.app.auth.LoginController.authenticate(LoginController.java:45)
3    at com.app.auth.LoginController.doPost(LoginController.java:23)
4    at javax.servlet.http.HttpServlet.service(HttpServlet.java:660)
5    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:231)
6    at com.app.security.SecurityFilter.doFilter(SecurityFilter.java:67)

1Traceback (most recent call last):
2  File "/app/views/auth.py", line 45, in login
3    user = db.query(User).filter_by(username=username).first()
4  File "/app/models/database.py", line 23, in query
5    return self.session.query(*args)
6sqlalchemy.exc.OperationalError: (psycopg2.OperationalError) connection to server at "db.internal.com" (10.0.0.5), port 5432 failed

1System.NullReferenceException: Object reference not set to an instance of an object.
2   at WebApp.Controllers.AccountController.Login(LoginViewModel model) in C:\Projects\WebApp\Controllers\AccountController.cs:line 45
3   at lambda_method(Closure , Object , Object[] )
4   at Microsoft.AspNetCore.Mvc.Infrastructure.ActionMethodExecutor.SyncActionResultExecutor.Execute(IActionResultTypeMapper mapper, ObjectMethodExecutor executor, Object controller, Object[] arguments)

1// در فایل web.config
2<system.web>
3  <customErrors mode="On" defaultRedirect="~/Error">
4    <error statusCode="404" redirect="~/NotFound" />
5    <error statusCode="500" redirect="~/ServerError" />
6  </customErrors>
7</system.web>
8
9// در Program.cs
10if (!app.Environment.IsDevelopment())
11{
12    app.UseExceptionHandler("/Error");
13    app.UseHsts();
14}