What is an attack?

July 12, 2008 in Attacks
Tags: attack

Attacks are the techniques that attackers use to exploit the vulnerabilities in applications. Attacks are often confused with vulnerabilities, so please try to be sure that the attack you are describing is something that an attacker would do, rather than a weakness in an application.

All attack articles should follow the Attack template.

Work to be done here includes

We’re in the process of creating, organizing, and completing the attack articles. If you’d like to help, find some stub articles in this category and fill in the details.

Creating articles for the following topics:

• Unauthorized Access Attempts
• File location guessing (see Guessed or visible temporary file)
• URL Redirection
• … make sure the attack is listed for each vulnerability

Note: many of the items marked vulnerabilities from CLASP and other places are really attacks. Some of the more obvious are:

• Log injection
• Resource exhaustion
• Reflection injection
• Reflection attack in an auth protocol

Advertisement