Cross Site Request Forgery(CSRF) Vulnerabilities
https://link.medium.com/Sh0gAYqBuib
https://link.medium.com/Sh0gAYqBuib
Medium
Cross Site Request Forgery(CSRF) Vulnerabilities
What is CSRF? How CSRF vulnerabilities work explained in simplest way possible.
When a computer uses more than one CPU in parallel to execute instructions it is known as..
Anonymous Poll
37%
Multiprocessing
22%
Multitasking
34%
Multithreading
7%
Parallel running
Cryptography does not answer the concerns of:
Anonymous Poll
40%
Availability of information
12%
Integrity of information
16%
Confidentiality of information
40%
Authenticity of information
Theft of Personally Identifiable Information (PII), such as credit card information is an example of which type of attack?
Anonymous Poll
0%
Integrity
36%
Authenticity
64%
Confidentiality
0%
Availability
Which attack is used to understand the type of network topology implemented at the target?
Anonymous Poll
58%
Scanning
8%
Land
8%
Teardrop
25%
Spoofing
MALWARE CLASSES
• VIRUS = Code that propagates (replicates) across systems with user intervention.
• WORM = Code that self-propagates/replicates across systems without requiring user intervention.
• BOT = Automated process that interacts with other network services.
• TROJAN = Malware that is often disguised as legitimate software
.
• RANSOMWARE = Malware that holds the victim's data hostage by cryptography or other means
• ROOTKIT = Masks its existence or the existence of other software
• BACKDOOR = Enables a remote attacker to have access to or send commands to a compromised computer
• RAT = Remote Access Trojan, similar to a backdoor
• INFO STEALER = Steals victims information, passwords, or other personal data
• HACKTOOL = Admin tools or programs that may be used by hackers to attack computer systems and networks. These programs are not generally malicious
• HOAX = Program may deliver a false warning about a computer virus or install a fake AV
• DROPPER/DOWNLOADER = Designed to "install" or download some sort of malware
• ADWARE = Automatically renders advertisements in order to generate revenue for its author.
• PUP/PUA = Potentially Unwanted Program, sometimes added to a system without the user's knowledge or approval
• VIRUS = Code that propagates (replicates) across systems with user intervention.
• WORM = Code that self-propagates/replicates across systems without requiring user intervention.
• BOT = Automated process that interacts with other network services.
• TROJAN = Malware that is often disguised as legitimate software
.
• RANSOMWARE = Malware that holds the victim's data hostage by cryptography or other means
• ROOTKIT = Masks its existence or the existence of other software
• BACKDOOR = Enables a remote attacker to have access to or send commands to a compromised computer
• RAT = Remote Access Trojan, similar to a backdoor
• INFO STEALER = Steals victims information, passwords, or other personal data
• HACKTOOL = Admin tools or programs that may be used by hackers to attack computer systems and networks. These programs are not generally malicious
• HOAX = Program may deliver a false warning about a computer virus or install a fake AV
• DROPPER/DOWNLOADER = Designed to "install" or download some sort of malware
• ADWARE = Automatically renders advertisements in order to generate revenue for its author.
• PUP/PUA = Potentially Unwanted Program, sometimes added to a system without the user's knowledge or approval
Getting started with XSS: Cross-Site Scripting Attacks
https://infosecwriteups.com/getting-started-with-xss-cross-site-scripting-attacks-822c82b7cd82
https://infosecwriteups.com/getting-started-with-xss-cross-site-scripting-attacks-822c82b7cd82
Medium
Getting started with XSS: Cross-Site Scripting Attacks
Let’s get started with XSS, in order to get those critical bugs- CSRF, SSRF, RCE. Most of the time, an XSS flaw is the cause of a…