Login

rantanplan · 02-23-2017, 03:08 AM

We have an security tester, and he found a scenario where an 500 Error coming.

Any Idea how i can catch this?

With Burp Suite Repeater:
POST /appname/1' OR '1'='1/ HTTP/1.1
.
.
.

Get following Page from Server

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>500 Internal Server Error</title>
</head><body>
<h1>Internal Server Error</h1>
<p>The server encountered an internal error or
misconfiguration and was unable to complete
your request.</p>
<p>Please contact the server administrator at
.... to inform them of the time this error occurred,
and the actions you performed just before this error.</p>
<p>More information about this error may be available
in the server error log.</p>
<p>Additionally, a 500 Internal Server Error
error was encountered while trying to use an ErrorDocument to handle the request.</p>
</body></html>