Karteikarten
Security+ Network Attacks
Karten in diesem Stapel (17)
- 1FootprintingReconnaissance
- 2Ping Sweepwhat hosts respond to a ping request
can send to a whole subnet
typically based on 1-2 already known addresses - 3Nmapnetwork mapper
host discovery, detection of OS and services, open ports - 4MAC Floodingattacker connects to a port and continuously floods it with MAC addresses, flooding the CAM table
the switch then acts like a hub and sends out all traffic to all ports
attackers NIC must be set to promiscuous mode - 5Jammingwhen an AP broadcasts a high-gain signal to overpower the signal of another AP
- 6Rogue APan AP that shouldn't be there
could be added by a hacker or an employee - 7Evil Twinrogue AP with same or similar SSID to entice users to connect
- 8MiTMMan in The Middle
threat actor takes over a target's active session
often done through packet sniffing or session hijacking - 9Session Hijackingafter user has verified credentials the hacker will steal session token or ID
threat actor either takes over session or uses token or ID later - 10DHCP Starvationusing up all of the IP addresses
- 11ARP Poisoninghacker changes the ARP cache in order to re-route traffic
can be done from a command prompt or scripted using the 'arp' command - 12PUP or PUAprograms that are installed during the installation of another program that was downloaded from a trusted source
- 13lifecycle of an APT1. initial compromise
2. establish foothold
3. escalate privileges
4. internal recon
5. move laterally
6. maintain presence
7. complete mission - 14DNS Poisoningattacker changes DNS data in order to re-route traffic
done by changing the DNS cache or poisoning the DNS server - 15Domain Hijackinghacker takes over domain name
often does this by using social engineering to gain info to transfer ownership on the registration website - 16Typosquattingsetting up a domain name that is misspelled from the intended website
relies on users mistyping the domain name and not realizing their mistake - 17URL Redirectionuser types in the intended address but is redirected to attacker's website
Informationen
- Beschreibung
- CompTIA Information Technology (Security+ ) Karteikarten am Security+ Network Attacks, erstellt von Lyndsay Badding am 26/04/2023.
- Erstellt von
- Lyndsay Badding
- Aufrufe
- 5
- Tags
- Bewertung