Web application attack playbooks¶

An application usually gives way in order: what it exposes, who it thinks you are, what it lets you do, and what it hands over. Run end to end, the chain below reaches from the first external look at the surface to a demonstrated compromise.