Fichas
Security+ Application Attacks
Fichas del conjunto (24)
- 1Injection Attackprocess of forcing a database to accept and run malicious code
- 2Improper Input Handlingfailing to apply proper input handling for input fields on a web-application
leaves an opening for a hacker to inject code or a user to mistakenly cause an error
data input must match parameters set - 3Error Handlingprogramming error messages to only give needed info to remedy the error
giving too much info can lead to an attack
ex: "wrong username" or giving system info along with error code - 4Code Injectionprogramming instructions written in the language of the target application
- 5Host Header Injectionthe attacker abuses the implicit trust of the HTTP host header
attacker can poison password-reset functionality and web caches by providing a false host header to the web app - 6LDAP Injectionenabling privilege escalation, authentication bypass, and details on existing logins and accounts by injecting LDAP statements into the application, typically through input fields being populated with statements rather than values, such as a first name
if the statement is successfully submitted, it may be interpreted as instructions rather than inputs - 7SQL Injectionattempting to read data or modify a database by injecting SQL database statements in place of legitimate input
utilizes combining a command with a true statement - 8DLL Injectionloading a malicious DLL into the address space of another process
this is done to open malicious network connections or interact with files or the registry - 9Directory Traversalinject commands into a URL or HTTP message
uses '../' to attempt to get to the root account - 10MiTBMan in The Browser
type of MiTM attack
a trojan installs a browser extension that intercepts calls between the browser and its security mechanisms in real-time - 11XML Injectioncan affect the structure or logic of an application or insert records into a database, such as creating a login that did not exist before or consuming all of the resources while attempting to read all of the data
- 12API Attackwhen an API is sent via HTTP rather than HTTPS
allows hackers to send data to execute malicious commands and even gain unauthorized access - 13Memory Leakdue to poor coding practices
memory no longer in use is not reallocated, leading to all memory being used up - 14Pointer/Object Dereferencea pointer is a programming tool used to reference an area of memory
to read data from memory, dereference the pointer - 15Overflow Attackstarget memory locations and pointers
access adjacent memory locations to either manipulate the data or crash the application, possibly the system - 16Buffer Overflowswrite more data into the buffer
intent is to corrupt adjacent data and perform a DoS - 17Integer Overflowsinput is submitter into a value input as a calculation that produces a result larger or smaller than permitted
ex: has been used to lower price fields - 18Race Conditionswhen the outcome from one procedure is dependent on the order and timing of other procedures and events
hackers will attempt to manipulate the data after it's checked out and before it's used - 19Replay Attackattacker guesses or sniffs the session ID
can also use cookies - 20SSL Strippingusing 'sslstrip' utility to remove SSL from the server response
- 21Pass-The-Hash AttackPtH
hacker captures the hash during login and passes it through for authentication as the user - 22XSSattacker dynamically inserts JavaScript code into a webpage that a target is browsing via MiTM or by inserting the script code into a comment or other text field on a web form
script "attacks" the target, revealing session info - 23CSRFuser already has an active session with a trusted website
user clicks link in phishing email which submits a malicious request, the attacker can then steal credentials - 24SSRFcausing a web server to execute requests on internal servers
Información
- Descripción
- CompTIA (Security+ ) Information Technology Fichas sobre Security+ Application Attacks, creado por Lyndsay Badding el 27/04/2023.
- Creado por
- Lyndsay Badding
- Visitas
- 5
- Etiquetas
- Valoración