Lec 11: Web Security II: XSS, CSRF Flashcards by Lea Lacson | Brainscape

Q

What are websites? How are they implemented?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What browser attacks are a result of unforeseen user input?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Where are the majority of vulnerabilities now found in software?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is web attacker? How does it work and what is the goal?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is gadget attacker?

A

Variation of web attacker.

Like adding an evil map extension to your website

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is the basic execution model of the browser?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What are the events in the basic execution model of the browser?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is the browser’s relationsip with HTML and Scripts?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is Event-Driven Script Execution?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is JavaScript? What is it used for? How do attackers use it?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is the history behind JavaScript?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How is JavaScript used in web pages?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is the JavaScript Security Model?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is the same-origin policy?

A

Part of the JavaScript Security Model.

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How do library imports relate to the JavaScript security model?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is the DOM?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What does browser and document structure look like?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What are reading properties with JavaScript?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What are some page manupulation possibilities with JavaScript?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How can you use JavaScript to steal the clipboard contents?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What are frames? Why do you use them?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is remote scripting? What are the methods you can achieve it?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

How does remote scripting work>

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is port scanning behind firewall?

A

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

What is Cross Site Scripting? How does it work?

A

Q

What are cookies?

A

Q

What is the basic pattern of cross site scripting?

A

Q

What is the echoing User Input example?

A

A XSS example (cross site scripting)

Q

How does Cross-Site Scripting to steal cookies work?

A

Q

Why would a user click on an evil link that would allow for XSS?

A

Q

Why does it matter if an attacker gets a cookie for naive.com in XSS?

A

Q

How does a stored script XSS attack work?

A

The attacker can register an account inputing the XSS into a field.
attacker sends register account request form
adminstrator opens request form with the XSS in it, then the adminstrator’s cookie is stolen
attacker can now use adminstrators cookie to get adminstrative control

Q

How does a stored script XSS attack work from attackers POV?

A

Q

How does stored script XSS work from victim administrator POV?

A

Q

(T/F) XSS is a form of “reflection attack”. Explain what a reflectiona ttack is

A

Q

What damage can XSS cause to the victim?

A

Q

Where do malicious scripts lurk?

A

Q

What are other sources of malicious scripts?

A

Q

What was the MySpace Worm?

A

Q

What was the Twitter Worm?

A

Q

How do you prevent XSS?

A

Q

What is validateRequest in ASP.NET? What is its flaw?

A

Q

What is httpOnly Cookies?

A

Q

What is the problem related to cross site request foregery?

A

Q

What is Cross-Site Request Foregery?

A

Q

What is the basic idea of XSRF?

A

Q

Why is cooke authentication not enough?

A

Can use JavaScript to send a request to have a bad thing at the naive site happen using cookie for authentication

Q

How does XSRF work in code/HTTP?

A

Q

How does login XSRF work in HTTP diagram?

A

Q

How do you use XSRF for XSS with inline gadgets?

A

Q

What is the difference between XSRF and XSS?

A

Q

What are XSRF defences?

A

Q

What is the secret, random validation token defense to XSRF work?

A

Q

What is NoForge?

A

need to bind session ID to token in order to do a secret, random validation token protection against XSRF

Q

What are the differentt ypes of referer validation for XSRF protection?

A

Q

Why is referer validation not always strict?

A

Q

What is an XSRF attack with lenient referer checking?

A

Q

What is the ideal XSRF defense?

A

Q

What is an origin header?

A

Q

What are the differences between the three standard web attacks: SQL injection, XSS, and XSRF?

A