Behind Enemy Lines: Administrative Application Attacks White Paper released

Download the white paper here.

A white paper was released by MWR InfoSecurity discussing the security implications of administrative web applications.

This explains how the use of alternative protocols (such as DHCP and 802.11) can be used to perform web based attacks. The white paper also explains the different methods available for exploiting these issues in practice, and details how tools can be built to test and exploit them.

The paper is based upon original research by Rafael Dominguez Vega.