Home > edition > eop

The Card Decks

Both current decks have six suits and there are also two Joker cards. Each suit contains 13 cards (Ace, 2-10, Jack, Queen and King). This page contains the card browser where you can browse through each of the cards in the OWASP Cornucopia decks.

API Integration

Here you will find the API documentation to more easily integrate against OWASP Cornucopia and use the cards and card codes in other systems.

Card Browser

information-disclosure ID2

information-disclosure ID3

information-disclosure ID4

information-disclosure ID5

information-disclosure ID6

information-disclosure ID7

information-disclosure ID8

information-disclosure ID9

information-disclosure IDX

information-disclosure IDJ

information-disclosure IDQ

information-disclosure IDK

information-disclosure IDA

denial-of-service DS2

denial-of-service DS3

denial-of-service DS4

denial-of-service DS5

denial-of-service DS6

denial-of-service DS7

denial-of-service DS8

denial-of-service DS9

denial-of-service DSX

denial-of-service DSJ

denial-of-service DSQ

denial-of-service DSK

denial-of-service DSA

elevation-of-privilege EP2

elevation-of-privilege EP3

elevation-of-privilege EP4

elevation-of-privilege EP5

elevation-of-privilege EP6

elevation-of-privilege EP7

elevation-of-privilege EP8

elevation-of-privilege EP9

elevation-of-privilege EPX

elevation-of-privilege EPJ

elevation-of-privilege EPQ

elevation-of-privilege EPK

elevation-of-privilege EPA

Elevation of Privilege version

Elevation of Privilege Edition (EoP) is a threat modeling game developed by Adam Shostack while working at Microsoft. It's the game all the other games are based on. Instead of the security concepts featured in the first editions, EoP card suits are structured around the STRIDE threat categories (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege):