SECFND 7: Network App Attacks

Question 1

Fast Flux

Answer 1

have numerous IP addresses that are associated with a single fully qualified domain name, where the IP addresses are changed with extremely high frequency by changing DNS A records

Question 2

Double IP flux

Answer 2

rapidly change both the hostname to IP address mappings, and also the authoritative name server using the DNS name server resource records

Question 3

Domain Generation Algorithm (DGA)

Answer 3

Randomly generated domain names often used in CnC or malware.

Question 4

XSS

Answer 4

injection of malicious scripts into web pages that are executed on the client-side. Lack of input validation. Often delivered via phishing

Question 5

Stored XSS

Answer 5

Most dangerous. Stored on infected server

Question 6

Reflected XSS

Answer 6

Most common. User clicks malicious link.

Question 7

XSS exploits trust in

Answer 7

Users trust in a particular website

Question 8

CSRF exploits trust in…

Answer 8

Website trust in a users browser

Question 9

Homoglyph

Answer 9

text characters that have shapes which are identical or similar to each other