Hacking Web 2.0 MindMap
Some work I did a while back to categorise Web 2.0 vulnerability types.
PNG file
http://michaeldaw.org/images/webhacking2_0.PNG
References
(6) Comments
It is definately a “step forward”. I can visualise much more, but baby steps as they say. Thanks for the feedback.
[...] So we embed malicious code into a Flash, PDF, DOM, HTML, Quicktime etc. Can this code by used to “bypass normal authentication?”, absolutely, can it be “hidden from casual inspection”, certainly. [...]
For the web feed hacking part I got my blackhat slides and whitepaper at
http://www.cgisecurity.com/rss/ that you may find interesting.
- zeno
[...] released the Web Hacking 2.0 mindmap at the beginning of this year (2007). Someone from the Phoenix OWASP chapter liked the idea and [...]
Hey, this is neat! Seems like this could really go somewhere. Where I dunno. There is a lot of terms and attacks in the space and its hard to organize, especially for people that aren’t able to do this stuff 24/7. This could be a could way to plugin and continue researching with proper context.