Saturday, August 9, 2008

Additional Security Issues: Hacme Casino

Hacme Casino from Foundstone is a well known vulnerable web application from the Hacme series used as a learning platform for secure software development. It is accompanied with a solution guide that demonstrates security issues in the application.

During my own usage – for self-learning, developer group trainings and security group demonstrations I have discovered a few more vulnerabilities that I am sharing here for the benefit of those who wish to get more out of Hacme Casino.

1. Vulnerability Exploited: Insecure Direct Object Reference

For vulnerability description refer here.

As seen in the screenshot below, it is possible to download potentially any file from the web server's file system without authentication by guessing and directly referencing it's path. Here we have downloaded boot.ini which is arguably not sensitive. Nevertheless sensitive files can be potentially downloaded as well.

2. Vulnerability Exploited: Session Fixation

For information on Session Fixation refer here. Following steps confirm the vulnerability.

Step 1: Login with a fixed session ID as seen in the Paros proxy screenshot.

Step 2: Check the trapped response from Paros. As we see the session ID is same as what we fixed.

Step 3: This step is not really required but just for a double check. Let's access the OPTIONS link. The trapped session ID in Paros is definitely the one that we fixed as seen. The next screenshot confirms indeed it was possible to access OPTIONS with this session ID.

3. Vulnerability Exploited: Cross Site Request Forgery

For vulnerability description refer here. Below are additional functions that are vulnerable to CSRF. The exploitation method is same as described in Hacme Casino guide.



  1. Your music is amazing. You have some very talented artists. I wish you the best of success. wettseiten paypal

  2. They players can see the dealer deal via web cams. The advantages of live dealer games are many. You can play games by sitting right in your room. Since the game is being viewed via webcam, you can eye everything. Casino operators

  3. The information you have posted is very useful. The sites you have referred was good. Thanks for sharing...
    Real Money Casino Online

  4. thanks this page and website good good The Beautiful Broken Web..
    Please click on this post if you wanna paly with online casino.Thank you.


  5. I really loved reading your blog. It was very well authored and easy to understand. Unlike other blogs I have read which are really not that good.Thanks alot!
    real money slots

  6. Anonymous casino runs on Soft Swiss Casino Software, which ensures a high level of security and a powerful protection system.

  7. Having been in the casino party and planning business for many years I have heard from customers some very sad stories of what occurred at their casino fundraiser and I would like to pass to you the 7 steps you must follow to ensure you have a successful casino fundraiser and hire the BEST casino party company for your event. bandar judi online

  8. Excellent explanation! In the online casino gambling world, people just mesmerized to play the casino games.

  9. . It was very well authored and easy to understand. Unlike other blogs I have read which are really not that good.Thanks alot! Executive Protection

  10. I'm happy to see the considerable subtle element here!. Agen bola

  11. Very helpful suggestions that help in the optimizing topic,Thanks for your sharing.


  12. While the admin of the web site is working, no question soon it will likely be famous, due to its feature blogs.

  13. Very Nice keep it up, Thanks for sharing this amazing information with us, keep sharing this type of stuff.

    Web Hosting in Pakistan

  14. I am glad that I saw this post. It is informative blog for us and we need this type of blog thanks for share this blog, Keep posting such instructional blogs and I am looking forward for your future posts.แทง มวย

  15. wow ! Great blog for the playing casino.Thanks for sharing this amazing information with us, keep sharing this type of stuff.12 Play Live Casino Malaysia

  16. Thanks for sharing the info, keep up the good work going.... I really enjoyed exploring your site. good resource...