1.3 Application Attacks

Question 1

This type of attack involves gaining higher-level access to a system by exploiting a vulnerability or design flaw.

Answer 1

Privilege Escalation

Question 2

This type of attack is the most common attack carried out on web pages. Involves the injection of javascripts into a webpage in order to carry out malicious scripts, capture entered information, or display messages.

Answer 2

Cross Site Scripting (XSS)

Question 3

This type of XSS attack involves scripts running as input, which then get returned to the user and executed on the victim machine. Can also be a URL hyperlink in an email that runs the script when the victim click the link in the email.

Answer 3

Non-persisten (reflected)

Question 4

This XSS attack type is kept stored in a database or web server, allowing a script to be ran against every user who accesses the targeted webpage. There is no specific target involved.

Answer 4

Persistent (stored)

Question 5

This type of attack is often the result of bad programming by not handling input/output correctly. Involves an attacker inserting their own information into a data stream.

Answer 5

Injection attacks

Question 6

This type of injection attack focuses on modifying the requests going into a relational database in order to perform malicious queries.

Answer 6

SQL Injection

Question 7

These two injection types will modify data transfer and storage requests, and manipulate the results of directory access requests.

Answer 7

XML and LDAP Injection

Question 8

This type of injection attack involves the manipulation of dynamic-link library code that can unintentionally run programs or applications.

Answer 8

DLL Injection

Question 9

This type of attack involves overwriting the memory buffer in order to cause data to spill over into other memory areas. Can cause DoS and allow a system to be compromised. Complex exploit that can be repeatable.

Answer 9

Buffer Overflow

Question 10

This type of attack involves capturing useful information from network traffic and then send the data back out across the network in order to appear as the person they captured the info from.

Answer 10

Replay Attack

Question 11

This type of replay attack involves an attacker capturing a password hash being transported over the network and then passes it on to the server as its own request in order to gain authentication.

Answer 11

Pass the hash

Question 12

This happens when an attacker uses headers, browser cookies, or any captured network traffic in order to take over the target’s trusted session with a website.

Answer 12

Session Hijacking

Question 13

This type of request forgery is often known as a one-click attack and takes advantage of the inheirent trust between the website and your browser. Often sent as a hyperlink in an email with the request in it that runs when clicked.

Answer 13

Cross site request forgery (XSRF)

Question 14

This type of forgery eliminates the need for a client and allows an attacker to perform requests to a web server on behalf of the attacker. Often caused by bad programming practices.

Answer 14

Server Side Request Forgery (SSRF)

Question 15

This type of attack utilizes the trust between your OS and your PC hardware.

Answer 15

Driver Manipulation

Question 16

This driver manipulation technique involes inserting a shims to circumvent security on a system.

Answer 16

Shimming

Question 17

This process creates metamorphic malware that can appear differently each time it is loaded. It is very difficult to track using signature-based malware detection.

Answer 17

Refactoring

Question 18

This type of attack in on-path and is carried out by an attacker where they sit in the middle between a victim and server and downgrade the session from TLS to SSL.

Answer 18

SSL Stripping

Question 19

This scenairio involves processes happening simultaneously that can cause malfunctions in a program.

Answer 19

Race Condition

Question 20

This is what it is called when unused memory on a system is not properly released and continues to grow in size until there is no memory left on a system.

Answer 20

Memory leak

Question 21

This type of vulnerability is exploited by pointing portions of memory to empty space that can cause bugs and application crashes.

Answer 21

Null pointer dereference

Question 22

This is what it is called when an attacker is able to gain access to unauthorized directories by utilizing the .\ command

Answer 22

Directory Traversal

Question 23

Why should errors be handled properly when programming?

Answer 23

They can display system info useful to attackers

Question 24

This type of attack invovles the attacker exploiting vulnerabilities in the application programming interface.

Answer 24

API Attacks