Pentesting Dash Platform - Design and Execution of a Penetration Test for DP
Original Title: Pentesting Dash Platform - Konzeption und Durchführung eines Pentestes für DP
Type: Master Thesis (Group Project)
Language: German
Authors: Vincent Adobatti, Markus Dick, Ömer Gin, Marc Herschel, Sven Hundertmark, Marten Meinhardt, Jan Müller, Markus Neuber
Keywords: IT Security, Pentesting, DLT Technology, Distributed Systems
Download Report — Download Slides
Dash Platform is a technology stack for developing decentralized applications on the Dash network. The two most important architectural components, Drive and DAPI, transform the Dash P2P network into a document-based cloud that developers can integrate into their decentralized applications. Dash Platform is currently still in the development phase and is not yet in a state that corresponds to mature software.
This is where our master project comes in, with the given goal of designing and conducting a penetration test of Dash Platform. This final report, written by the executing team, provides a detailed insight into the methodology applied during the penetration test and the results obtained. To conduct the penetration test, both methods of static source code analysis were chosen as well as stress testing techniques such as Denial of Service (DoS) attacks. API testing was also carried out through, for example, fuzzing or selecting targeted payloads, and Dash Platform was examined for game-theoretic approaches.
In the course of this project, some potential attack vectors or ambiguities in the functionality of Dash Platform were found, which should be addressed by the development team before the first post-beta release.