Fichas
CompTIA Security + 1.4 Network Attacks
Fichas del conjunto (40)
- 1Rogue Access Points-an unauthorized wireless access point
-may be added by an employee or an attacker
-very easy to plug in a wireless AP or enable wireless sharing on OS - 2How to prevent Rogue Access Points-schedule a periodic survey of the building
-use 802.1x (network access control) where you must authenticate no matter the connection type - 3Wireless evil twin-malicious access point designed to look exactly like the ones on your network
-can possibly overpower the existing access points
-public wifi spots are easy to take advantage of - 4Bluejacking-sending unsolicited messages to another device via bluetooth
-typical functional distance is about 10 meters
-you can bluejack with an address book object or third party - 5Bluesnarfing-Access a bluetooth-enabled device and transfer data
-contact list, calendarr, email, etc - 6Wireless deauthentication-a significant wireless denial of Service (DoS attack)
- 7802.11 management frames-802.11 wireless includes a number of management
-important for the operation of 802.11 wireless - 8How to protect against deauthorization attacks-IEEE has already addressed the problem
-some of the important management frames are encrypted
-802.11w is required for 802.11ac compliance - 9Radio frequency jamming (RF)-denial of service
-transmits interfering wireless signals
-not always done intentionally
-jamming is intentional - 10Wireless jamming-constant, random bits
-constant, legitimate frames
-random data sent at random times
-reactive jamming
-must be done close range
-fox hunt can be done to find the jam - 11RFID (radio-frequency identification)-access badges, inventory, etc
-anything that needs to be tracked
-radar technology
*Rf powers the tag, ID is transmitted back
-bidirectional communication - 12RFID attacks-data capture
-you can spoof the reader by modifying the data
-jam signals thru denial of service
-decrypt communication - 13Near field communication (NFC)-two-way wireless communication
-payment systems such as square reader
-access token - 14NFC security concerns-remote capture (within 10 meters)
-frequency jamming (denial of service)
-relay/ replay attacks
-loss of RFC device control - 15Cryptographic nonce-arbitrary number used once
-a random or pseudo-random number
-something that can't be reasonably guessed
-nonce can be used during login - 16Initialization Vector-a type of nonce used to add randomization to the encryption scheme
-used in encryption ciphers such as WEP and SSL - 17Salt-a nonce most commonly associated with password randomization
-each user would get a different salt for their passwords - 18On-path network attack-man in the middle attack
-intercepts and redirects traffic
-ARP poisoning is an on-path attack on the local IP subnet (spoofing) - 19On-path browser attack-man in the browser
-huge advantage for the attacker
-easy to proxy encrypted traffic
-example: malware waits for you to login to your bank - 20the MAC address-ethernet Media Access Control address
-physical address of a network adapter
-48 bits/ 6 bytes long - 21LAN switching-forward or drop frames based on the MAC address
-gather a constantly updating list of addresses
-maintain a loop-free environment - 22MAC flooding-the MAC table has limited space
-attackers start sending traffic with different source MAC addresses to the same switch
-table fills up and switch begins flooding traffic to all interfaces - 23MAC cloning/spoofing-an attacker changes their MAC address to match an existing device
-circumvent filters
-create a denial of service or DoS
-easily manipulated through software - 24DNS poisoning-modify the DNS server
-modify the client host file
-send a fake response to a valid DNS request - 25Domain hijacking-get access to the domain registration, and you control where the traffic flows
-can use brute force or other methods to gain access - 26URL hijacking-sell the badly spelled domain to the actual owner
-redirect to a competitor
-phishing site that looks similar to the real site
-infect with a drive-by download - 27Types of URL hijacking-Typosquatting/ brandjacking
-Outright misspelling
-A typing error
-A different phrase
-different top-level domain - 28Domain reputation-internet tracks your security posture
-email reputation
-a baa rep can cause email delivery to fail
-check with the email or service provider to check reputation - 29Denial of service-force a service to fail
-vulnerability or design failure
-cause a system to be unavailable
-precursor to a DNS spoofing - 30A "friendly" DoS-network DoS (layer 2 loop)
-bandwith DoS (downloading multi-gigabyte Linux distributions over a DSL line
-water line breaks above data center - 31Distributed Denial of Service (DDoS)-launch an army of computers to bring down a service
-this is the reason why attackers have botnets
-asymmetric threat - 32DDoS amplification-turns small attack into a big attack
-turn internet services against the victim
-NTP, DNS, ICMP - 33Application DoS-make app break or work harder
-fill the disk space
-overuse a measured cloud resource
-increase clod server response time - 34Operational Technology (OT) DoS-take advantage of electric grids, traffic control, manufacturing plants, etc
-requires a different approach of security - 35Scripting and automation-automate tasks
-no human error or delays
-automated attacks allows attacker to sit back - 36Windows PowerShell-command file for system administrators
.ps1 file extension
-extend command line functions
-attack windows systems thru file share access and system administration - 37Python-general purpose scripting language
-.py file extension
-commonly used for cloud orchestration
-attack routers, servers, and switches - 38Shell Script-scripting the Unix/Linux shell
-starts with a shebang or hash bang
-attack the Linux/Unix environment
-control the OS from the command line - 39Macros-automate functions within an application
-designed to make the app easier to use
-attackers create automated exploits - 40Visual Basic for Applications (VBA)-automates processes within Windows applications (common in Microsoft office)
-powerful programming language
-CVE -2010-0815 / MS10-031
*VBA does not properly search for ActiveX controls
Información
- Descripción
- CompTIA Security + IT (Cybersecurity) Fichas sobre CompTIA Security + 1.4 Network Attacks, creado por Demetrius Sharkey el 03/02/2022.
- Creado por
- Demetrius Sharkey
- Visitas
- 1
- Valoración