Flashcards
(1.2) Attack Types- Flash Cards
Cards in this deck (31)
- 1PhishingFake Website asking for credentials
- 2VishingVoice Phishng
- 3Watering Hole AttackThe site you visit is attacked, infecting those who visit it
- 4Denial of Service-Overwhelming a service causing it to be denined
-Deny DNS Server, bad guy creates their own
-Botnet, amplification - 5Man in the Middle-Bad guy sends bad ARP request then all traffic is routed through bad guy first, then forwarded to intended recipient
- 6Man on the Browser-Creates a proxy in your system and sends info through proxy without having to be on network
- 7ARPIP associted with MAC on *local network*, saved in computer for future reference
- 8Buffer Overflows-Data being written to emory overflows due to lack of alloted space, that data is grabbed by bad guy
- 9Data Injection- Bad guy injects his own code into an application
(SQL is most common was to inject) - 10Cross Site Scripting- Putting Java script into a search box on a website
-C - 11Cross Site Request Forgery-Bad guy creates a request --> Sends hyperlink to 3rd partys email-->when link is clicked, request is validated
- 12Privilege EscalationGaining more access to a system then was orignally intended, could possilby become system administrator.
- 13DNS Poisoning- Could change client host file to direct user to WRONG IP.
- Could change info in DNS server to affect more clients - 14Domain Highjacking-Gaining access to domain registration, change domain info to bad guys IP.
- 15Replay Attack-Replaying all the original users data over the network to make server think it is the same person and grants access
- Not as common because the hash is different each time they are sent - 16URL Hijacking-Redirecting traffic
-Misspelling = Typo Squatting - 17Session Highjacking-Gaining access to the session ID through cookies and using it to access account
- 18Driver ManipulationPutting malicious code onto hardware drivers
- 19RefactoringChanging the way malicious code looks everytime
- 20SpoofingPretending to be a: Websever,DNS Server, Person, Email, Area Code, MAC, IP.
- 21Wireless Replay Attack-Easier to capture data OTA
-Need to capture 15K packets to run in "cracking" proram - 22Rouge Acces Point- When someone plugs in an access point to provie service to more unauthorized users.
( Should configure 802.1x so everyone must authenticate to gain access to network) - 23Wireless Evil TwinConfiguring a WAP to look exactly like original ( same password nd BSSID), possible have Evil Twins signal over power original
- 24Wireless Jamming-Over Whelming the signal, making the network non usable
-Must be in close promimity to what is being jammed - 25Fox HuntingTo find where jamming is comming from
- 26WPS (Wifi Protected Setup)- No longer used
- Design flaw was that Personal ID number was 7 digit number with check digit, could be brut forced in 4 hours.
- Pin with access point
-Button on access point
-NFC & USB - 27Blue Jacking- Sends data over bluetooth
-Does not grant access to data - 28Blue Snarfing- Contacts, Calander, Emal and picuters could be downloaded if file name is known.
- 29RFIDDevice powered by radio frequency, mostly used for tracking products
- 30NFC-Two way wireless net work
- Mainly used for payments
-Can be jammed - 31Wireless Disassociation-Denial of service to a wireless netowrk
- Takes 802.11 packets transfered OTA and BSSID and station MACs.
Information
- Description
- Flashcards on (1.2) Attack Types- Flash Cards , created by Brianna Conway on 19/02/2020.
- Created by
- Brianna Conway
- Views
- 0
- Rating