Ask HN: Is there a list of known software attack vectors?

1 points by bryanwt 5y ago ↗ HN

Most informational guides [0] feel like landing pages and enterprise tools [1] often point to internally profitable reporting services and bug bounty programs.

Individual postmortems are available, but a public aggregator or database of information feels too high value to not exist. Should I be looking at books? I would think they quickly become dated.

[0]: http://www.njamha.org/it/resources/WhitePaper_CyberAttackSurvivalChecklist.pdf

[1]: https://github.com/features/security

2 comments

[ 2.7 ms ] story [ 10.6 ms ] thread

aespinoza 5y ago ↗

Not sure if this is what you are referring to, but this page contains a list of offensive techniques which could be used to create attack vectors:

https://attack.mitre.org/

bryanwt 5y ago ↗

Thank you! This is much more in-depth than most other public resources.