Programming Vulnerabilities

Question 1

Buffer Overflows

Answer 1

When an attack goes past the boundary of the destination buffer and corrupts adjacent memory

Heap and Stack are buffer overflows

Question 2

Stack Overflow

Answer 2

Buffer overlow that has a fixed size withtin program memory

Question 3

Heap Overflow

Answer 3

Dynamic memory is overflowing

Question 4

Integer Overflow

Answer 4

increments an integer variable beyond max value.

Question 5

CSRF

Answer 5

attack based on behalf of authenticated user

Question 6

Broken Access Control

Answer 6

manipulating URLs

Question 7

Reflected XSS

Answer 7

steal users session token and gets reflected off a web app and then executed locally on browser

Question 8

Persistent XSS

Answer 8

Malicious script is permanently stored on web server

Question 9

LFI vs RFI

Answer 9

LFI allows access to local files on the server hosting the webapp bad input validation or insecure coding practices

RFI is code injection from a remote server.

Question 10

Using Strings what tool can you use see obfuscated output

Answer 10

Base64