URL, HTTP and HTML Flashcards
What are some of the techniques used in obfuscation?
- Username based obfuscation
- %-encoding based obfuscation
- misspelled URL’s
- Homographic URL’s
What is username based obfuscation?
A username is before the url to make it look like a website eg:
\cnn.com&breaking_news@10.0.0.1/topstory.html
What is %-encoding based obfuscation?
% in a url means the next 2 characters are ASCII eg:
www%2Egoogle%2Ecom is the same as www.google.com
What is homographic obfuscation?
On or two words are spelled alike but have a different meaning eg: www.g00gle.com
What is obfuscation?
Used to deceive users into visiting a site they may not intend to
What is the HTTP options request?
Request for information about the communications options available at the server
What is the HTTP get request?
Request to retrieve information resource associated with URI
What is the HTTP Head request?
Requests meta information associated with the resource without transferring the resource itself
What is the HTTP Post request?
Sends data to the server in order to modify or extend the specified resource eg post to a forum
What is the HTTP delete request?
Requests the origin server delete the resource
What is the HTTP Trace request?
Diagnostic method, the request is echoed back to the client
What is the HTTP connect request?
Sets up a transparent channel through a proxy server
What is error 401?
Unauthorised access, need to enter credentials and try again
What are the two HTTP authentication schemes?
Basic - uses a base 64 encoded string which is not secure
Digest - sends a string of random data to client as a challenge. Client response with data including password and credentials.
What is the purpose of a cookie?
So the server knows information about the client for the next time they send a request
What information is contained in a cookie?
- Name
- Value
- Expiration date
- Domain
- Path
What are cookies generally used for?
- Access control (single sign on)
- Preferences management
- Tracking user activity
- Maintaining session state
How does HTTPS work?
Client and server establish a secure connection and communication takes place over this.
What are potential problems with HTTPS?
Man in the middle attacks
How does HTML work?
HTML consists of a set of tags attached to text.The tags describe the meaning and how it will be displayed.
In HTML how is a close tag displayed?
with a / for eg:
What are meta tags in HTML used for?
They are placed in the head of the document and contain information about the document and contain relevant keywords. Search engines often use them
What is XML?
Extensible markup language
What is the difference between HTML and XML?
- HTML is used to describe how data is displayed
- XML can be used to describe what the data actually means
What is XHTML?
Extensible hyper text markup language. It can be mixed with other XML languages.
