"Know Your Enemy: Web Application Threats"
Sunday, February 25. 2007
The Honeynet Project & Research Alliance is pleased to announce the release of a new paper "Know Your Enemy: Web Application Threats". This technical white paper provides behind the scenes information on various HTTP-based attacks against web applications, including remote file inclusion and exploitation of the PHPShell application. The paper is based on the research and data collected from the Chicago Honeynet Project, the New Zealand Honeynet Project and the German Honeynet Project during multiple honeypot compromises.
The paper is available at Know Your Enemy: Web Application Threats.
Along with the release of this paper, comes new functionality to the "Google Hack" Honeypot (GHH), used extensively in the paper. GHH now includes an automated malware collection function, as well as remote XML-RPC logging for SSL support. GHH is available at http://ghh.sourceforge.net/
The paper is available at Know Your Enemy: Web Application Threats.
Along with the release of this paper, comes new functionality to the "Google Hack" Honeypot (GHH), used extensively in the paper. GHH now includes an automated malware collection function, as well as remote XML-RPC logging for SSL support. GHH is available at http://ghh.sourceforge.net/
".
