Injection Attacks Flashcards
What is LDAP?
Lightweight Directory Access Protocol
A protocol for access and maintenance of distributed directory information services
What is an LDAP Injection?
an application attack that targets web-based applications by fabricating LDAP statements that are typically created by user input.
How to protect yourself from an LDAP Injection?
Input validation
Input sanitization
What is a Command Injection?
occurs when a threat actor is able to execute arbitrary shell commands on a host via a vulnerable web application.
Input validation and input sanitization are used to prevent it
What is Process Injection?
method of executing arbitrary code in the address space of a separate live process.
How do you mitigate against process injections?
Endpoint Security Solutions
Security Kernel Module
Practice of Least Privilege
