STUDYSEC+ {Part5}
Tags: Computer Science, Networking, Study, Cybersecurity, Cybersecurity Awareness

Type of Application Attack 1 [PART5]

Application attacks defined.

Common application attacks.

Due to improvement in modern network security, it may not be easy to exploit the network resources. As the improvement in modern network security, attackers have shifted their focus to application attacks. The hacker will focus on exploiting weakness in the software and operating systems that people use every day. A poorly developed application can often give the hacker an access to system if the exploit executed perfectly.

Cross-Site Scripting (XSS) Attack.

The hacker inserts script code into a form on a web page that gets submitted to the server:

The server submits the script code to another client system, which then executes the script.

XSS often used to attack database servers that are used to support web pages.

Structured Query Language (SQL) injection attack.

SQL is the common language used to manipulate databases. Most business and web apps use SQL to retrieve data from databases.

To perform an attack, a hacker inserts SQL commands to an application, usually from an input field, knowing that the application will pass the command to the database application:

The injected SQL commands will then modify the database such as inserting a new username and password, so that will enable access to hackers to exploit.

Buffer Overflow Attack.

Hacker sends more information to the application than the application’s memory buffer can handle.

The additional information will often be placed in memory outside the buffer. If the hacker can get the right information stored outside of the buffer, a hacker can execute code with administrative privilege.

For example, an attacker may introduce extra code, sending new instructions to the application to gain access to IT systems.

If attackers know the memory layout of a program, they can intentionally feed input that the buffer cannot store, and overwrite areas that hold executable code, replacing it with their own code. For example, an attacker can overwrite a pointer (an object that points to another area in memory) and point it to an exploit payload, to gain control over the program.

Integer Overflow Attack.

Like buffer overflow but exploit with the mathematical function of an application.

When a mathematical function returns an integer larger than the memory space that has been allocated to receive it, applications often respond in unexpected ways; This represents a security issue. Integer overflow or underflow could cause significant damage when sensitive data is stored in integers. For instance, withdrawing 1 dollar from an account with a balance of 0 could cause an integer underflow and yield a new balance of 4,294,967,295.

Directory Traversal/Command Injection Attack.

The attack against a server which hacker attempts to traverse the web server’s directories where the hacker can execute a command on the web server OS:

Hacker manipulates the URL request in order to get into directories and get a command prompt on the underlaying OS.

LDAP (Lightweight Directory Access Protocol) injection attack.

Uses the same principle as an SQL injection attack, but exploits LDAP calls instead of SQL commands.

XML (Extensible Markup Language) Injection attack.

Uses the same principle as the SQL and LDAP attacks, but exploit XMP to modify the targeted application.