Injection Attacks

Question 1

Code Injection

Answer 1

Attacker adds in their own code into a data stream. Enabled because of bad programming with an application.

Question 2

Structured Query Language (SQL)

Answer 2

Used to manage data held in a relational database management system or stream processing relational management systems.

Question 3

What types of code are vulnerable to code injection?

Answer 3

HTML, SQL, XML, LDAP, etc (many different codes are vulnerable)

Question 4

Extensible Markup Language (XML)

Answer 4

A text-based markup language used as a set of rules for data transfer and storage. Both human and machine readable.

Question 5

Dynamic-Link Library (DLL)

Answer 5

A Windows library containing code and data used for many different applications

Question 6

DLL Injection

Answer 6

Abuses the DLL library by injecting a code in one application in order to push the code into another DLL application.