Password attacks, privilege escalation, covering tracks, session hijacking, SQL injection, web server attacks and sniffing.
39 cards · basic cards · AI-written, checked twice. Edit anything.
- What is a brute force attack?
Show answer
Systematically trying all possible password combinations until the correct one is found.- What is a dictionary attack?
Show answer
An attack using a list of common words and phrases as password guesses.- What is a rainbow table?
Show answer
A precomputed lookup table mapping password hashes to plaintext passwords.- What is a hybrid password attack?
Show answer
Combines dictionary words with numbers and special characters to generate password guesses.- What does salt do in password storage?
Show answer
A random value added to passwords before hashing to prevent rainbow table attacks.- What is key stretching?
Show answer
Repeatedly applying a hash function to make password cracking computationally expensive.- Name a common password cracking tool.
Show answer
Hashcat, John the Ripper, or Hydra are commonly used for password cracking.- What is vertical privilege escalation?
Show answer
A user gains higher-level permissions or administrative access on the same system.- What is horizontal privilege escalation?
Show answer
A user gains access to another user's files or resources at the same privilege level.- What is a kernel exploit?
Show answer
An attack exploiting vulnerabilities in the operating system kernel to gain elevated privileges.- What is a misconfigured sudo entry?
Show answer
A sudoers file allowing users to run certain commands with root privileges without proper restrictions.- What does the SUID bit allow?
Show answer
A file permission allowing a program to run with the owner's privileges regardless of who executes it.- What is DLL injection?
Show answer
Forcing a process to load a malicious dynamic link library to execute arbitrary code.- Why do attackers delete logs?
Show answer
To remove evidence of unauthorized access and hide their activities from detection.- What is log clearing?
Show answer
Removing or truncating log files to erase a record of system events and unauthorized actions.
FlashKeepers