Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: Info about attack trees
From: Urlan <urlancomp () gmail com>
Date: Fri, 25 May 2012 13:44:54 -0300

Federico,

Check this out: http://cwe.mitre.org/top25/

2012/5/25 Federico De Meo <adegod () gmail com>

Hello everybody, I'm new to this maling-list and to security in general.
I'm here to learn and I'm starting with a question :)

I'm looking for some informations about attack trees usage in web
application analysis.

For my master thesis I decided to study the usage of this formalism in
order to reppresent attacks to a web applications.
I need a lot of use cases from which to start learning common attacks
which can help building a proper tree.

From where can I start?

I've already read the OWASP top 10 vulnerabilities an I'm familiar with
XSS, SQLi, ecc. however I've no clue on how to combine them together in
order to perform the steps needed to attack a system. I'm looking for some
examples and maybe to some famous attacks from which I can understand which
steps are performed and how commons vulnerabilities can being combined
together. Any help is really appreciated.


-------------------
Federico.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/




-- 
Cordialmente,

Urlan Salgado de Barros
CompTIA Security+ Certified
MSc. in Applied Informatics
Bachelor on Computer Science
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]