Technical Interview Flashcards

Question

Open Web Application Security Project (OWASP) - Broken Authentication

Answer 1

- Vulnerabilities that attackers exploit to impersonate legitimate users online. ``` - Weaknesses seen in the following: session management (ie - hijacked session IDs). credential management (ie - stolen login credentials). ``` - Session is a sequence of network transactions associated to the same user within a period of time. - Session management concerns how you define the parameters of that session. - Web applications can track sessions before and after authentication. https: //auth0.com/blog/what-is-broken-authentication/

Answer 2

- Security threat occurs when the web application does not adequately protect sensitive information like session tokens, passwords, banking information, location, health data, etc. whose leak can be critical for the user. https: //deepsource.io/blog/owasp-top-ten-sensitive-data-exposure/

Answer 3

XML External Entities (XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. XML eXtensible Markup Language is a markup language that defines a set of rules for encoding documents in a format that is both human-readable and machine-readable.

Answer 4

- When a user can access some resource or perform some action that s/he is not supposed to access. https: //portswigger.net/web-security/access-control

Answer 5

- Security misconfiguration happens when a server or web application does not implement all of the security controls or security controls are configured incorrectly. https: //www.guardicore.com/2019/03/understanding-and-avoiding-security-misconfiguration/

Answer 6

Insecure deserialization is a vulnerability in which an untrusted or unknown data is used to either inflict a denial of service attack, execute code, bypass authentication or further abuse the logic behind an application. Serialization is the process that converts an object to a format that can later be restored. https://searchsecurity.techtarget.com/definition/insecure-deserialization

Answer 7

Hackers identify a weak component in the system by scanning system using automated tools or by analyzing the components manually. Keeping the components and libraries updated with the latest patches and upgrading as soon as the newest version becomes available helps significantly reduce the number of known vulnerabilities that put the application at risk, but it’s becoming more common for developers to be unaware of all the components their applications are actually using, making it impossible to address all the vulnerabilities. https://www.kiuwan.com/owasp-top-10-2017-a9-using-components-with-known-vulnerabilities/

Answer 8

Insufficient logging and monitoring vulnerability occur when log events that are security-critical events are not logged off properly, and the system is not monitored. https://www.vistainfosec.com/blog/what-is-insufficient-logging-monitoring-and-how-can-it-be-prevented/#:~:text=Insufficient%20logging%20and%20monitoring%20vulnerability,affects%20the%20incident%20handling%20process.

Answer 9

What the core problem/root cause is of the Class of Attack or Weakness? Cross-site scripting is an attack that traps a web application and directs web application users to a fake web application to plant a computer virus or steal login information. https://www.wafcharm.com/en/blog/owasp-top-10-for-beginners/ Client-side code injection attack meaning whenever an application inserts input from a user within the output it generates, without validating or encoding it, it gives the opportunity to an attacker to send malicious code to a different end-user. Cross-Site Scripting (XSS) attacks take these opportunities to inject malicious scripts into trusted websites, which is ultimately sent to other users of the application, which become the attacker’s victims. ``` How the class of issue is attacked/exploited? Cross-Site Scripting (XSS) attacks take these opportunities to inject malicious scripts into trusted websites, which is ultimately sent to other users of the application, which become the attacker’s victims. ``` The victims’ browser will execute the malicious script without knowing it should not be trusted. Therefore, the browser will let it access session tokens, cookies (cookies help us log in automatically), or sensitive information stored by the browser. If properly programmed, the scripts could even rewrite the contents of an HTML file. In stored XSS attacks, the malicious script resides permanently on the target server, in a message forum, in a database, in a visitor log, etc. The victim gets it when its browser requests the stored information. In reflected XSS attacks, the malicious script is reflected in a response that includes the input sent to the server. This could be an error message or a search result, for example. ``` How the class of issue is remediated? Treat all user input as a potential security risk - sanitize input. ```

Answer 10

What the core problem/root cause is of the Class of Attack or Weakness? SQL injection errors occur when: Data enters a program from an untrusted source. The data was used to dynamically construct a SQL query. SQL is the standard and most widely used programming language for relational databases. Relational databases are databases that store and provide access to data points that are related to one another. https://owasp.org/www-community/attacks/SQL_Injection Like code injection, this attack inserts a Structured Query Language (SQL) script –the language used by most databases to perform query operations– in a text input field. The script is sent to the application, which executes it directly on its database. ``` How the class of issue is attacked/exploited? As a result, the attacker could pass through a login screen or do more dangerous things, like read sensitive data directly from the database, modify or destroy database data, or execute admin operations on the database. ``` ``` How the class of issue is remediated? Input validation and set query parameters - sanitize input. ```

Answer 11

- Website Crawling is indexing the content of websites so they can be searched. The crawler analyzes the content of a page looking for links to the next pages to fetch and index. Crawl Types - Site crawls are an attempt to crawl an entire site at one time, starting with the home page. It will grab links from that page, to continue crawling the site to other content of the site. This is often called “Spidering”. - Page crawls, which are the attempt by a crawler to crawl a single page or blog post.

Answer 12

- Web vulnerability scanner through passive and active analysis. - Used to test for the whole Open Web Application Security Project (OWASP) Manual Penetration Testing Features of Burp Suite - Intercept everything browser sees A powerful proxy/history lets you modify all HTTP(S) communications passing through your browser. - Break HTTPS effectively Proxy even secure HTTPS traffic. Installing your unique Certification Authority certificate removes associated browser security warnings. - Quickly assess your target Determine size of target application. Automated Scanning For Vulnerabilities of Burp Suite - Fine-tune scan control Get fine-grained control, with a user-driven scanning methodology. Or, run "point-and-click" scans. - Navigate difficult applications Crawl more complex targets. Burp Suite's crawler identifies location based on content - not just the URL. - Configure scan behavior Customize what you audit, and how.

Answer 13

- Zed Attack Proxy (ZAP) Used to test for the whole Open Web Application Security Project (OWASP). - Security testing. - World's most widely used web app scanner - free and open source (managed by volunteers).

Answer 14

- Alert Box It is used when a warning message is needed to be produced. When the alert box is displayed to the user, the user needs to press ok and proceed. - Confirm Box It is a type of pop up box which is used to get the authorization or permission from the user. The user has to press the ok or cancel button to proceed. - Prompt Box It is a type of pop up box which is used to get the user input for further use. After entering the required details, the user has to click ok to proceed next stage. Also by pressing the cancel button the user returns a null value.

Answer 15

- Nonprofit foundation that works to improve the security of software. - OWASP releases a Top 10 which references the 10 most critical security concerns for web application.

Technical Interview Flashcards

(39 cards)