Re: Multi stage attacks on networks?

From: Wendel (wendel_at_hadrion.com.br)
Date: 04/30/04


Date: 30 Apr 2004 07:26:23 -0700

Hi,

> I am a Ph.D. student studying network security at Princeton
> University. I am trying to see if attacker can use a series of
> vulnerabilities to take over a particular resource. Has there been prior
> work on this topic earlier? Can someone give me a real example where the
> adversary actually uses a series of vulnerabilities to break into a
> resource?
>
> May be he uses the webserver in DMZ and then uses it to get access
> to fileserver and then uses it to compromise something else?

Yahhh, it's the real hacking, you enter in a network and stop when u
have access to ALL resources. It can take some time, but... ;-)

To see "real examples", you can search at related sites, examples of
"case of study" or "case of sucess" of penetrating testings to
networks.

Like that:

http://securitypronews.com/securitypronews-24-20031215AWhiteHatsPenetrationTest.html

Regards.

Mercenarie's Club Member => http://cdm.frontthescene.com.br
Front The Scene Team => http://www.frontthescene.com.br
Personal Page => http://ws.frontthescene.com.br



Relevant Pages

  • Re: Multi stage attacks on networks?
    ... > vulnerabilities to take over a particular resource. ... Has there been prior ... Almost any compromise is conducted in this manner. ...
    (Bugtraq)
  • Multi stage attacks on networks?
    ... I am trying to see if attacker can use a series of ... vulnerabilities to take over a particular resource. ... Has there been prior ...
    (comp.security.misc)
  • Multi stage attacks on networks?
    ... I am trying to see if attacker can use a series of ... vulnerabilities to take over a particular resource. ... Has there been prior ...
    (comp.security.unix)
  • Multi stage attacks on networks?
    ... I am trying to see if attacker can use a series of ... vulnerabilities to take over a particular resource. ... Has there been prior ...
    (Bugtraq)
  • Re: Multi stage attacks on networks?
    ... > vulnerabilities to take over a particular resource. ... Has there been prior ... Yahhh, it's the real hacking, you enter in a network and stop when u ...
    (comp.security.misc)