Category:Attack - Revision history

Jmanico at 19:30, 6 June 2016

2016-06-06T19:30:31Z

2016-06-06T19:24:53Z

2012-08-10T12:48:09Z

Corrected minor grammatical error

2012-05-03T05:00:49Z

Re-worked examples

2010-09-13T20:55:23Z

2010-09-13T20:53:30Z

2010-09-13T20:33:58Z

2010-09-13T20:30:18Z

2009-05-08T22:43:00Z

2008-02-13T05:14:22Z

@@ Line 13: / Line 13: @@
 *DNS Poisoning: Is an attack that seeks to introduce false DNS address information into the cache of a DNS server, where it will be served to other users enabling a variety of attacks. (e.g., Phishing)
-Note: many of the items marked vulnerabilities from CLASP and other places are really attacks. Some of the more obvious are:
+Note: many of the items marked vulnerabilities and other places are really attacks. Some of the more obvious are:
 * [[Resource exhaustion]]
 * [[Reflection injection]]
 * [[Reflection attack in an auth protocol]]
 [[Category:Article Type]]

@@ Line 9: / Line 9: @@
 ==Examples:==
-*Brute Force: Is an exhaustive attack that works by testing every possible value of a value (password, file name, etc.) [[:Brute_force_attack|Brute_force_attack]]
+*Brute Force: Is an exhaustive attack that works by testing every possible value of a parameter (password, file name, etc.) [[:Brute_force_attack|Brute_force_attack]]
 *Cache Poisoning: Is an attack that seeks to introduce false or malicious data into a web cache, normally via HTTP Response Splitting.  [[:Cache_Poisoning|Cache_Poisoning]]
 *DNS Poisoning: Is an attack that seeks to introduce false DNS address information into the cache of a DNS server, where it will be served to other users enabling a variety of attacks. (e.g., Phishing)

@@ Line 9: / Line 9: @@
 ==Examples:==
-*Brute Force: Is the analysis of remote server, checking characters password of the operating system (letters, numbers and symbol's) [[:Brute_force_attack|Brute_force_attack]]
+*Brute Force: Is an exhaustive attack that works by testing every possible value of a value (password, file name, etc.) [[:Brute_force_attack|Brute_force_attack]]
-*Cache Poisoning: Is the execution of malicious code in the browser to spy on their contents  [[:Cache_Poisoning|Cache_Poisoning]]
+*Cache Poisoning: Is an attack that seeks to introduce false or malicious data into a web cache, normally via HTTP Response Splitting.  [[:Cache_Poisoning|Cache_Poisoning]]
-*DNS Poisoning: Is the execution of malicious code on the DNS server by redirecting Web pages [[:Often_Misused:_Authentication|Often_Misused:_Authentication]]
+*DNS Poisoning: Is an attack that seeks to introduce false DNS address information into the cache of a DNS server, where it will be served to other users enabling a variety of attacks. (e.g., Phishing)
 Note: many of the items marked vulnerabilities from CLASP and other places are really attacks. Some of the more obvious are:

@@ Line 11: / Line 11: @@
 *Brute Force: Is the analysis of remote server, checking characters password of the operating system (letters, numbers and symbol's) [[:Brute_force_attack|Brute_force_attack]]
 *Cache Poisoning: Is the execution of malicious code in the browser to spy on their contents  [[:Cache_Poisoning|Cache_Poisoning]]
-*DNS Poisoning: Is the execution of malicious code on the DNS server by redirecting Web pages
+*DNS Poisoning: Is the execution of malicious code on the DNS server by redirecting Web pages [[:Often_Misused:_Authentication|Often_Misused:_Authentication]]
 Note: many of the items marked vulnerabilities from CLASP and other places are really attacks. Some of the more obvious are:

@@ Line 7: / Line 7: @@
 All attack articles should follow the [[Attack template]].
-==Work to be done here includes==
+==Examples:==
 *Brute Force: Is the analysis of remote server, checking characters password of the operating system (letters, numbers and symbol's) [[:Brute_force_attack|Brute_force_attack]]
-*File location guessing (see [[Guessed or visible temporary file]])
+*Cache Poisoning: Is the execution of malicious code in the browser to spy on their contents  [[:Cache_Poisoning|Cache_Poisoning]]
-*URL Redirection
+*DNS Poisoning: Is the execution of malicious code on the DNS server by redirecting Web pages
-* ... make sure the attack is listed for each [[:Category:Vulnerability|vulnerability]]
+* ... make sure the attack is listed for each [[:Often_Misused:_Authentication|Often_Misused:_Authentication]]
 Note: many of the items marked vulnerabilities from CLASP and other places are really attacks. Some of the more obvious are:

← Older revision		Revision as of 22:43, 8 May 2009
Line 25:		Line 25:

	[[Category:Article Type]]		[[Category:Article Type]]
−	[[Category:OWASP ~~Honeycomb~~ Project]]	+	[[Category:OWASP ASDR Project]]

← Older revision		Revision as of 05:14, 13 February 2008
Line 4:		Line 4:

	Attacks are the techniques that attackers use to exploit the vulnerabilities in applications. Attacks are often confused with vulnerabilities, so please try to be sure that the attack you are describing is something that an attacker would do, rather than a weakness in an application.		Attacks are the techniques that attackers use to exploit the vulnerabilities in applications. Attacks are often confused with vulnerabilities, so please try to be sure that the attack you are describing is something that an attacker would do, rather than a weakness in an application.
−
−	~~{{Template:PutInCategory}}~~

	All attack articles should follow the [[Attack template]].		All attack articles should follow the [[Attack template]].