Web Application Attacks & Vulnerabilities

Question 1

Define a web application

Answer 1

A piece of software which runs over the internet

Question 2

Define SOAP

Answer 2

Simple Object Access Protocol, utilizes xml and HTTP/HTTPS to make requests to a web server

Question 3

Define WSDL

Answer 3

Web Services Description Language file to define how to interact with the SOAP API

Question 4

Define Rest API

Answer 4

Representational State Transfer, utilizes HTTP/S get, post, put, and delete

Question 5

Common Security Risks

Answer 5

Injection Attacks
Security Misconfigurations
Dependency Vulnerabilities

Question 6

Common Defense

Answer 6

SAST, DAST
Input validation (fuzzing)
Encoding
Whitelisting/Blacklisting
Web App Firewalls (WAF)
RASP
Bug Bounties (hackerone, bugcrowd)

Question 7

Define SAST

Answer 7

Static Application Security Testing

Question 8

Define DAST

Answer 8

Dynamic Application Security Testing

Question 9

Fuzzing methods

Answer 9

Mutation
Generation
Protocol Based

Question 10

Define RASP

Answer 10

Runtime Application Security Protection, dynamically identify known threats from web application inputs