Replay Attacks 2.4

Question 1

Replay Attacks

Answer 1

• Attempts to recreate the conditions that the sequence of events occurred.
• Attacker replays the data to appear as the victim or someone else.
• Not an On-Path Attack

Question 2

Methods to Perform a Replay Attack

Answer 2

• Network tapping
• ARP poisoning
• Place malware on the computer

Question 3

Pass the Hash

Answer 3

• Attacker captures the hash used to authenticate a process.
• Is injected into a process in place of the password.

Question 4

Avoiding “Pass The Hash”

Answer 4

• Use salt or encryption
• Session ID

Question 5

Cookies

Answer 5

• Text files sent with every request to a website
• Used for tracking, personalization, session management

Question 6

Security Risks of Cookies

Answer 6

• Contains lots of user information and personal data

Question 7

Session Hijacking

Answer 7

• Also known as Sidejacking
• Attack against the communication session
• Injects packets into the middle of the communication session.

Question 8

Session ID

Answer 8

• A unique ID provided by server to identify a user’s session upon accessing the system.
• Contained within the Headers that are sent back and forth between each system.

Question 9

Header Manipulation Methods

Answer 9

• Information gather: Wireshark, Kismet
• Exploits such as Cross-site scripting
• Modifying headers
• Modifying cookies

Question 10

Preventing Session Hijacking

Answer 10

• Encrypt end to end: Encrypting from the device to the server/system
• Encrypt end-to-somewhere: Partial encryption