Testing fot Privilege escalation - Revision history

Cecil.su at 08:32, 23 June 2008

2008-06-23T08:32:40Z

Cecil.su at 08:28, 23 June 2008

2008-06-23T08:28:31Z

Cecil.su at 08:26, 23 June 2008

2008-06-23T08:26:03Z

Mmeucci: New page: {{Template:OWASP Testing Guide v3}} '''This is a draft of a section of the new Testing Guide v3''' == Brief Summary ==
..here: we describe in "natural language" what we want to test...

2008-06-02T23:23:14Z

New page: {{Template:OWASP Testing Guide v3}} '''This is a draft of a section of the new Testing Guide v3''' == Brief Summary == ..here: we describe in "natural language" what we want to test...

New page

{{Template:OWASP Testing Guide v3}}

'''This is a draft of a section of the new Testing Guide v3'''

== Brief Summary ==
 
..here: we describe in "natural language" what we want to test.
 
== Description of the Issue ==
 
...here: Short Description of the Issue: Topic and Explanation
 
== Black Box testing and example ==
'''Testing for Topic X vulnerabilities:''' 
... 
'''Result Expected:''' 
... 
== Gray Box testing and example ==
'''Testing for Topic X vulnerabilities:''' 
... 
'''Result Expected:''' 
... 
== References ==
'''Whitepapers''' 
... 
'''Tools''' 
...

@@ Line 4: / Line 4: @@
 == Brief Summary ==
 <br>
 Privilege escalation occurs when a user gets to access more resources than is normally allowed when it should have been protected from the application. This is usually conducted from a flaw in the application. The result is that the application performs actions with more privileges than intended by the application developer or system administrator.
 The degree of the escalation depends on which privileges the attacker is authorized to possess and which privileges can be obtained in a successful attack. For example, a programming error that permits a user to gain extra privilege after successful authentication limits the degree of escalation because the user is already authorized to hold some privilege. Likewise, a remote attacker gaining superuser privilege without any authentication presents a greater degree of escalation.
-<br>
 <br>
 == Black Box testing and example ==

@@ Line 7: / Line 7: @@
 Privilege escalation occurs when a user gets to access more resources than is normally allowed when it should have been protected from the application. This is usually conducted from a flaw in the application. The result is that the application performs actions with more privileges than intended by the application developer or system administrator.
-The degree of the escalation depends on which privileges the attacker is authorized to possess and which privileges can be obtained in a successful attack. Fro example a programming error that permits a user to gain extra privilege after successful authentication limits the degree of escalation because the user is already authorized to hold some privilege. Likewise, a remote attacker gaining superuser privilege without any authentication presents a greater degree of escalation.
+The degree of the escalation depends on which privileges the attacker is authorized to possess and which privileges can be obtained in a successful attack. For example, a programming error that permits a user to gain extra privilege after successful authentication limits the degree of escalation because the user is already authorized to hold some privilege. Likewise, a remote attacker gaining superuser privilege without any authentication presents a greater degree of escalation.
 <br>
 == Description of the Issue ==

Testing fot Privilege escalation - Revision history

Cecil.su at 08:32, 23 June 2008

Cecil.su at 08:28, 23 June 2008

Cecil.su at 08:26, 23 June 2008

Mmeucci: New page: {{Template:OWASP Testing Guide v3}} '''This is a draft of a section of the new Testing Guide v3''' == Brief Summary == ..here: we describe in "natural language" what we want to test...

Mmeucci: New page: {{Template:OWASP Testing Guide v3}} '''This is a draft of a section of the new Testing Guide v3''' == Brief Summary ==
..here: we describe in "natural language" what we want to test...