Penetration Testing
Info about attack trees May 24 2012 07:49PM
Federico De Meo (demeof gmail com) (1 replies)
Hellp everybody, I'm new to this malinglist and to pen-testing.
I'm here to learn and I'm starting with a question :)

I'm looking for some informations about attack trees usage in web application analysis.

For my master thesis I decided to study the usage of this formalism in order to reppresent attacks to a web applications.
I need a lot of use cases from which to start learning common attacks which can help building a proper tree.

From where can I start?

I've already read the OWASP top 10 vulnerabilities an I'm familiar with XSS, SQLi, ecc. however I've no clue on how to combine them together in order to perform the steps needed to attack a system. I'm looking for some examples and maybe to some famous attacks from which I can understand which steps are performed and how commons vulnerabilities can being combined together. Any help is really appreciated.

------------------------------
Federico De Meo

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)

iQEcBAEBAgAGBQJPvpC5AAoJEI49NUMLM7fP9PYH/RBeE8LxAE9a/oZQc4FYj6GJ
2bStOwq3nkvdON433uMPQ+YHjbboLGoC67q0JoxyXX5oJ/aK25SBl160Z4em3XJl
XM1S3fXRZWHrayZ1YRyExGTDaPTHjwRfVUOAwMnxDJNFLOp3J1xx/Rs141zPsYwl
WcJtHNBo87DKvCLOPS/Uf/AvVR9dxM8sHSFHyd0qlT5iMC/X0wnA8mxmjm/q2A7j
5VsgK5QLKsG+L26CG8qYniaPZ3ge3SCt6BQJb0EzwzHcTjubfmA5zpkh++gUkNxT
/NMXb1Klz2cajxT2nQfj4rWAiaBEYiDVhuh4gs9UNBQ3NNw+7yMvJIgBMtf1Ia8=
=aPvP
-----END PGP SIGNATURE-----

[ reply ]
Re: Info about attack trees May 28 2012 12:07PM
Yiannis Koukouras (ikoukouras gmail com)


 

Privacy Statement
Copyright 2010, SecurityFocus