Gruyere servers as a sandbox environment for leaning penetration testing. Instead of just
reading about XSS (cross site scripting), Gruyere allows us to actually do it.
It allows for both black-box (penetration
testing without access to the source code) and white-box
(access to the application source code is given) hacking.
In order to use
Gruyere, one must first go to the start page and be assigned a
unique ID. This ID is pretty much your own "instance" of Gruyere. It
is completely sandboxed so whatever you do does not affect other users and vice
versa.
Once started, A
person can use various methods to compromise the system. It can be used as a
great learning tool and once I grasp basic XSS and XSRF knowledge, I will
definitely have to try this out.
No comments:
Post a Comment