ID: C2 Deep Pt.4

code injection technique used to attack data-driven applications. Malicious injection statements are inserted into an entry field for execution, such as dumping the database contents to the attacker.

attack where the attacker secretly relays and possibly alters the communications between two parties who believe that they are directly communicating with each other.

Type of cyber attack carried out over a Local Area Network (LAN) that involves sending malicious ARP packets to a default gateway on a LAN to change the pairings in its IP to MAC address table.

type of injection in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in a browser side script, to a different end-user.

SQL Injection

On-Path Attack (formerly known as a man-in-the-middle attack)

ARP Poisoning, also known as ARP Spoofing

Cross-Site Scripting (XSS) attacks

The dd command

The mv command

The Is command

The cd command

allows a technician to see information and modify the configuration settings of the network adapters in the workstation. It is used to connect to a network using broadband, dial-up, or VPN connection, or add/remove file and printer sharing over the network on the workstation.

A Public Network

A Private Network

detects potential data breaches/data ex-filtration transmissions and prevents them by monitoring, detecting, and blocking sensitive data while in use (endpoint actions), in-motion (network traffic), and at rest (data storage).

The Network and Sharing Center in the Control Panel

A Public Network

A Private Network

Data Loss Prevention Software

System Configuration

Performance Monitor

Resource Monitor

System information

system utility to troubleshoot the Microsoft Windows startup processes. This configuration is used to disable or re-enable software, device drivers, and Windows services that run at startup, or to change boot parameters.

Monitoring system that monitors utility in Windows that is used to monitor the activities on CPU and memory activity on a computer.

a utility used to display information about the use of hardware (CPU, memory, disk, and network) and software (file handles and modules) resources in real-time.

System Configuration (msconfig.exe)

Performance Monitor (perfmon.msc)

Resource Monitor (resmon.exe)

System information (msinfo32.exe)

Rivest Cipher 4

works by overloading a server with multiple requests (more than it can handle), thus eventually knocking the server offline.

sending of unsolicited messages over Bluetooth to Bluetooth-enabled devices such as mobile phones, PDAs, or laptop computers, sending a vCard which typically contains a message in the name field to another Bluetooth-enabled device via the OBEX protocol.

form of stream cipher. It encrypts messages one byte at a time via an algorithm. Plenty of stream ciphers exist, but this cipher is among the most popular. It's simple to apply, and it works quickly, even on very large pieces of data.

symmetric block cipher chosen by the U.S. government to protect classified information. This cipher is implemented in software and hardware throughout the world to encrypt sensitive data. It is essential for government computer security, cybersecurity and electronic data protection.

DoS Attack or Denial-Of-Service Attack

Bluejacking

RC4 (also known as Rivest Cipher 4)

Advanced Encryption Standard (AES)

a security protocol used in the IEEE 802.11 wireless networking standard. It was designed to provide more secure encryption than the earlier Wired Equivalent Privacy (WEP), without needing to replace existing hardware.

advanced Encryption Standard

Batch Script

scripts that run on the Windows operating system and, in their simplest form, contain a list of several commands that are executed in a sequence. You can run the file by calling its name from the command line or double-clicking the file in File Explorer.

an easy-to-use command-line text editor for Linux systems.This editor includes the functionality of a regular text editor, as well as syntax highlighting, multiple buffers, search and replace with regular expression support, spellchecking, UTF-8 encoding, and more.

used by Linux computers to enable the sharing and access of resources with Windows-based networks. This can also be used by Linux servers to provide file-sharing services to Windows clients.

a well-supported and will be regularly updated by the Linux distribution to support new hardware, performance, and security improvements. These releases are supported for a long time (approximately 10 years), so they are great to use in production systems like servers.

a prerelease of a software product that is given out to a large group of users to try under real conditions. These releases have gone through alpha testing in-house and are generally fairly close in look, feel and function to the final product.

a pre-release of a software product that is given out to software developers to test and modify their existing products to the upcoming version of an operating system or application.

a concept in software development where an application is frequently updated through the release of new features over time.

Long Term Support

one primary backup and two copies of the data, save the backups to two different types of media,, keep at least one backup copy off-site

Carriage Return Line Feed

HTTP response splitting attack

a type of cyber threat that manipulates the carriage return and line feed special characters found within a web application's HTTP header.

File Transfer Protocol FTP

Secure Shell SSH

Telnet

Simple Mail Transfer Protocol SMTP

Domain Name System DNS

Dynamic Host Configuration Protocol DHCP

Hypertext Transfer Protocol HTTP

Post Office Protocol 3 POP3

Network Basic Input Output System NetBIOS / NetBIOS over TCPIP NetBT

Internet Mail Access Protocol IMAP

Simple Network Management Protocol SNMP

Lightweight Directory Access Protocol LDAP

Hypertext Transfer Protocol Secure HTTPS

Server Message Block SMB / Common Internet File System CIFS

Remote Desktop Protocol RDP

20 21

22

23

25

53

67 68

80

110

137 139

143

161 162

389

443

445