diff options
| -rw-r--r-- | synopsis.pdf | bin | 167583 -> 165884 bytes | |||
| -rw-r--r-- | synopsis.tex | 57 |
2 files changed, 12 insertions, 45 deletions
diff --git a/synopsis.pdf b/synopsis.pdf Binary files differindex 25d6747..0dff540 100644 --- a/synopsis.pdf +++ b/synopsis.pdf diff --git a/synopsis.tex b/synopsis.tex index d7b7776..7205165 100644 --- a/synopsis.tex +++ b/synopsis.tex @@ -231,51 +231,16 @@ The latest release of OWASP Top 10 lists these vulnerabilities as the most critical web application security risks: \begin{itemize} - \item \textbf{A1:2017 - Injection} \\ - Allows the attacker to execute malicious code in the - application's back-end by tricking the interpreter with a - specially crafted message, e.g. SQL injection. - \item \textbf{A2:2017 - Broken Authentication} \\ - Includes every weakness which would enable the attacker to get - into to the application without authentication, i.e. by - hijacking other user's session, guessing or brute-forcing - password, getting keys or bypassing the login completely. - \item \textbf{A3:2017 - Sensitive Data Exposure} \\ - Exposing sensitive data because of weak protection, lack of - encryption, defective error handling or other behavior. - \item \textbf{A4:2017 - XML External Entities (XXE)} \\ - Exploitation of older or poorly configured XML proces |