Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 0 down vote favorite

My company has designed an web application and its going to be hosted soon, I would like to know what type of attacks can be carried on the web application to test the security of my web application

Right now I have tried the following attacks

  • Cross-Site Scripting (XSS)

  • Client-State Manipulation

  • Cross-Site Request Forgery (XSRF)

  • Cross Site Script Inclusion (XSSI)

  • Path Traversal

  • Denial of service attacks

  • DoS via ajax

  • Phishing via ajax

  • SQL injection

I have carried out the above mentioned attacks and I wish to know any other type of attacks to test my web application before its going to be hosted.

share|improve this question
1  
This question is overly broad and could only be properly answered with several books. – GdD Oct 10 '12 at 9:53
As the previous comment, and the answer below, both mentioned - this topic is simply HUGE, and is not a simple question. As mentioned, do some research, such as OWASP, also check out SANS 25, Mitre's CWE, and any number of books and sites on the matter. And that will still not be complete... Perhaps you can ask a more specific question? – AviD♦ Oct 11 '12 at 16:12

closed as not a real question by AviD♦ Oct 11 '12 at 16:09

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, see the FAQ.

1 Answer

up vote 4 down vote accepted

There are a huge number of possible attacks. The ones you mention cover most of it, but things like session management problems, DOM injection, misconfigured AJAX cross-domain policy, etc. are all problems too.

Check out the OWASP Top 10 project, and the OWASP Cheat Sheets for a more comprehensive list.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.