Ad Exchange vulnerability assessment

[dguido]

Web application software made for serving advertisements, like OpenX, are among the most exploited web applications on the internet due to the large volume of web traffic they come in contact with. Criminals frequently exploit these systems to redirect this flow of traffic towards a crimeware pack like the Blackhole Exploit Kit. Much of this software was written years ago in PHP and they have not been the subject of close study.

Perform a targeted assessment of these web applications with a eye towards vulnerabilities that can result in a server compromise.