OWASP - User contributions [en]

Brute force attack

2006-11-28T15:57:29Z

Mwood: /* Related countermeasures */

{{Template:Attack}}

{{Template:Stub}}

==What is a {{PAGENAME}}?==

In a brute force attack, the attacker attempts to bypass a security check by attempting possible options until finding one that works. The attacker attempts to exhaust the search space as efficiently as possible. With knowledge of the size of the search space and the rate that attempts can be made, one can calculate the length of time the brute force attack is likely to take.

==Common uses of the attack technique==

Brute force attacks are frequently used to attempt bypass of password based authentication schemes and cryptographic protection.

==Related vulnerabilities==

* [[Weak credentials]]
* [[J2EE Misconfiguration: Insufficient Session-ID Length]]

==Related countermeasures==

[[Salted hashes]]

[[Password based authentication]]

[[Category:Attack]]

Brute force attack

2006-11-28T15:51:18Z

Mwood: /* Related countermeasures */

{{Template:Attack}}

{{Template:Stub}}

==What is a {{PAGENAME}}?==

In a brute force attack, the attacker attempts to bypass a security check by attempting possible options until finding one that works. The attacker attempts to exhaust the search space as efficiently as possible. With knowledge of the size of the search space and the rate that attempts can be made, one can calculate the length of time the brute force attack is likely to take.

==Common uses of the attack technique==

Brute force attacks are frequently used to attempt bypass of password based authentication schemes and cryptographic protection.

==Related vulnerabilities==

* [[Weak credentials]]
* [[J2EE Misconfiguration: Insufficient Session-ID Length]]

==Related countermeasures==

[[https://www.owasp.org/index.php/Image:Salted_Hashes_Demystified.doc | Salted Hashes]]

[[Password based authentication]]

[[Category:Attack]]

Session fixation

2006-11-28T15:44:37Z

Mwood: /* Related Vulnerabilities */

{{Template:Attack}}

{{Template:Stub}}

==Description==

This article should cover attacks where the attacker forces the victim to use a chosen session identifier.

==Examples ==

==Related Threats==

==Related Attacks==

==Related Vulnerabilities==

[[Session Trapping]]

==Related Countermeasures==

[[Category:Attack]]

User:Mwood

2006-11-28T15:36:04Z

Mwood:

I am an attack and penetration tester at Ernst & Young LLC.