Tuesday, April 20, 2010

Use Enumerations for web application security testing.

Enumerations help identify specific software-related items that can be counted, aggregated, evaluated over time

CVE->Common Vulnerabilities and Exposures.
CWE->Common Weakness Enumeration.
CAPEC->Common Attack Pattern Enumeration and Classification.

The Class were  mentioned CVE,CWE,CAPEC below.





  • SQL Injection

  • XSS Attack

  • Buffer Overflow

  • Directory Traversal

  • PHP Include

  • Symbolic Link

  • Authorization Bypass

  • Dos Malformed Input

  • Information Leak




  • Integer Overflow

  • CSRF

  • Bad Permissions

  • Hard coded Password

  • Weak Crypto

  • Insufficient Randomness

  • Search Path

  • Sensitive data root

  • Dos Flood

  • Eval Injection


No comments:

Post a Comment