A simple example would be that the attack would be against the application’s passwords, not any password for the server hosting the application.
Application attacks target areas like the application’s permissions model, authentication controls, and data handling. Common application weaknesses that are exploited are buffer over/underflows, SQL injection, and logic errors. An application penetration test would aim to find these weaknesses before a malicious actor does.
If you like this blog post, find more content in our Glossary.
