What are logic bombs and time bombs? A logic bomb is a malicious piece of code that gets executed when a certain condition is met. A simple example is a program that monitors the payroll system of a company and deletes critical files when a specific employee is...
What is the CSRF or Cross-Site Request Forgery attack? The Cross-Site Request Forgery attack or CSRF attack is an attack in which an attacker can exploit the authentication cookies of a victim and send a malicious request to a web application using the authentication...
What is the FTP bounce attack? Suppose X is a user on attacker.com, and X wants to transfer a file from target.com. But, X does not have permission to transfer files from target.com. There is another machine, middle-man.com, which has permission to transfer files from...
What is the confused deputy problem? Let's look at a simple example first to understand the problem. Suppose a client sends the names of an input file and an output file to the server. The server compiles the input file and stores it in the output file. Let's also...
What is the replay attack? The replay attack is an attack in which an attacker repeats or delays a valid transmission and fraudulently re-transmits it. Using this approach, an attacker can fraudulently authenticate himself to a system, though he is not authorized to...
Please follow the link below to buy The Security Buddy Premium Membership.
