Banner
Online Articles
- Parameter TamperingParameter tampering is a type of web-based cyber attack in which certain parameters in a URL are changed without a user's authorization. In some cases, the data entered by a user into a form field of a webpage may also be modified -- again, without the user's authorization. The attack may point the browser to a link, page or site that the user did not intend to access.
Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 9
- What is Server Misconfiguration?Servers are dedicated computers for a specific purpose, and unlike the Desktop computer, these computers are made for durability, longevity, and for working for long periods of time as compared to a desktop PC.
Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 16
- HTTP Response SplittingHTTP response splitting is a means to an end, not an end in itself. At its root, the attack is straightforward: an attacker passes malicious data to a vulnerable application, and the application includes the data in an HTTP response header.
Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 18
- NTFS overviewNTFS, the primary file system for recent versions of Windows and Windows Server, provides a full set of features including security descriptors, encryption, disk quotas, and rich metadata. It can be used with Cluster Shared Volumes (CSV) to provide continuously available volumes that can be accessed simultaneously from multiple nodes of a failover cluster.
Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 25
- SOAP vs REST API: Difference Between Web ServicesSOAP stands for Simple Object Access Protocol whereas REST stands for Representational State Transfer.
Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 33
- Your Guide to Sensitive Data Exposure (Fuzzing) & How to Fix ItThis article delves into sensitive data exposure risks, how attackers use Random Fuzzing/Fuzzer programs to exploit such risks, and various best practices and tools to mitigate such risks in modern application delivery.
Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 40
Videos
- What is DNS Hijacking - How to Protect Yourself?What is DNS Hijacking or DNS Redirection and how to protect yourself? In this video, we have explained how DNS works and what is DNS hijacking through animation.
Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 11
- DNS Amplification AttackIn this video we will be going over a DNS attack what to look out for and how to prevent it.
Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 12
- Web Cache Poisoning Explained : Web Security & VulnerabilityBefore today's topic about the web cache poisoning vulnerability, we need to take a quick look at the fundamentals of web caching. When a user is requesting a page on a website, say index.html, the server will first check its cache to see if a copy of that page can be found in the cache.
Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 19
- Metasploit For Beginners | What is Metasploit Explained | Metasploit Basics Tutorial | SimplilearnThis video on Metasploit for beginners covers what Metasploit is and the need for Metasploit.
Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 23
- Everything You NEED to Know About WEB APP ArchitectureSoftware architecture for a web application is essentially the blueprint for how a web app is structured. There's monolithic architecture, where you basically piled everything into a single, tightly coupled codebase.
Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 31
- What is insecure deserialization and how to prevent it?We'll dive into insecure deserialization, its examples, and how to best prevent it.
Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 42
Infographic
Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 20
eBook
Web application security exploitation and countermeasures for modern web applications by
. This practical guide provides both offensive and defensive security concepts that software engineers can easily learn and apply. Andrew Hoffman, a senior security engineer at Salesforce, introduces three pillars of web application security: recon, offense, and defense. You'll learn methods for effectively researching and analyzing modern web applications--including those you don't have direct access to.
Call Number: TK5105.59 .H644 2020ISBN: 9781492053088Publication Date: 2020-03-24
Note: Refer to MHE Lecture 8- Web Application Attacks and Countermeasures: Slide 40