Tuesday, April 20, 2010

Use Enumerations for web application security testing.

Enumerations help identify specific software-related items that can be counted, aggregated, evaluated over time

CVE->Common Vulnerabilities and Exposures.
CWE->Common Weakness Enumeration.
CAPEC->Common Attack Pattern Enumeration and Classification.

The Class were  mentioned CVE,CWE,CAPEC below.



  • SQL Injection
  • XSS Attack
  • Buffer Overflow
  • Directory Traversal
  • PHP Include
  • Symbolic Link
  • Authorization Bypass
  • Dos Malformed Input
  • Information Leak



  • Integer Overflow
  • CSRF
  • Bad Permissions
  • Hard coded Password
  • Weak Crypto
  • Insufficient Randomness
  • Search Path
  • Sensitive data root
  • Dos Flood
  • Eval Injection

No comments:

Post a Comment