Flashcards
CompTIA Security + 1.3 Application Attacks
Cards in this deck (33)
- 1Privilege Escalation-gain higher level access to a system
-vulnerability or design flaws
-higher level access means more capabilities
-horizontal privilege escalation (user A can access user B stuff) - 2How to mitigate privilege escalation-patch quickly
-update anti virus /anti malware software
-data execution prevention
-prevent overrun at known memory address - 3Cross-Site Scripting-XSS
-CSS is Cascading Style Sheets
-caused by browser security flaws
-one of the most common web app development errors
-javascripts are used - 4Non-persisted (reflected) XSS Attack-web site allows scripts to run in user input
-attacker emails a link to attack the vulnerability
-script embedded within the URL executes in the victim browser - 5Persistent (stored) XSS attack-attacker posts a message to a social network
-everyone gets the payload, no target
-can spread rapidly over social media - 6How to avoid XSS atacks-do not click untrusted links
-consider disabling javascripts
-keep apps and browsers updated - 7Code Injection-adding your own info into a data system
-enabled due to bad programming
-HTML, SQL, XML, LDAP, etc - 8SQL Injection-structured query language (most common)
-modifies sql requests
-apps usually won't allow this - 9XML Injection-extensible markup language
-set of rules for data transfer and storage
-modifies XML requests - 10LDAP Infection-lightweight directory access protocol
-created by telephone companies
-modifies ldap requests to manipulate app results - 11DLL Injection-dynamic link library
-windows library containing code and data
-injects DLL to have an app run a program - 12Buffer Overflows-overwriting a buffer of memory
-developers need to perform bounds checking to avoid memory overwrites - 13Replay Attacks-useful info is transmitted over the network
-access to raw network data is needed
-network tap, ARP poisoning, malware
-example (pass the hash) - 14Browser cookies and Session IDs-cookies are info stored on your computer by the browser
-used for tracking and session management - 15Header Manipulation-info gathering
-exploits such as cross-site scripting
-modify headers (tamper, firesheep, scapy)
-modify cookies - 16How to prevent session hijacking-end to end encryption
-session id can't be captured if the attacker can't see it
end to somewhere encryption
-avoids some local wireless network exposure - 17Cross-site requests-common and legitimate
-gathers information from third party sources using a trusted browser - 18The Client & the server-web pages consists of client-side code and server-side code
-Client side renders the page on the screen(HTML, javascript)
Server side performs client requests(HTML, PHP) - 19Cross-site request forgery-one click attack or session riding
-XSRF, CSRF (sea surf)
-takes advantage of the trust that a web app has for the user - 20Server-side request forgery (SSRF)-attacker finds a vulnerable web app
-web server performs the request on behalf of the attacker
-caused by bad programming - 21WAF-Web Application Firewall
-used to stop SSRF attacks - 22Shimming-filling in the space between two objects
-malware authors make their own
-Windows has it's own shim that includes backwards compatibility with older Windows versions - 23Refactoring-metamorphic malware
-a different program each time it's downloaded
-NOP instructions make the malware look different
-can redesign itself - 24SSL Stripping/ HTTP downgrade-combines an on-path attack with a downgrade attack
-attacker must sit in the middle of the client to server conversation
-victim will not see any visual changes, only that the browser page isn't encrypted - 25SSL & TLS-Secure sockets layer (SSL)
-Transport layer security (TLS)
-TLS was an upgrade to the SSL - 26Race condition-a programming conundrum
-attackers take advanteg by using a TOCTOU
Time-of-check to time-of-use attack - 27Memory Vulnerablitites-manipulating memory can have advantages
-memory leak will eventually cause a system to crash - 28NULL Pointer difference-programming technique that references a portion of memory
-if the reference points to nothing the app crashes
-Integer overflow will allow attacker to manipulate the system - 29Directory traversal-path traversal
-read files from a web server that are outside of the website's file directory
web server software vulnerability
-web app code vulnerability - 30API attacks-Application Programming Interface
-attackers look for vulnerabilities in this new communication path
-exposing sensitive data, DoS, intercepted communication, privileged access - 31Resource exhaustion-a specialized DoS (Denial of Service) attack
-may require one device and low bandwidths - 32ZIP bomb-a 42 kilobyte .zip compressed file
-uncompresses to 4.5 petabytes (4,500 terabytes) - 33DHCP starvation-attacker floods a network with IP address requests
MAC address changes each time
-the server eventually runs out of addresses
Information
- Description
- CompTIA Security + IT (Cybersecurity) Flashcards on CompTIA Security + 1.3 Application Attacks, created by Demetrius Sharkey on 02/02/2022.
- Created by
- Demetrius Sharkey
- Views
- 1
- Rating