Most Common Vulnerabilities Archives

What is DrDoS attack and how does it work?

CCNA, CCNP, CompTIA, DoS and DDoS Prevention, Most Common Vulnerabilities, Network Security, Securing DNS, Security Fundamentals

What is a DrDoS attack? DrDoS attack is a type of Distributed Denial of Service or DDoS attack in which an attacker exploits a number of victim machines and make the victim machines send a huge number of requests to a target machine. As a result, the target machine...

How does SYN Flood work and how to prevent it?

CCNA, CCNP, CompTIA, DoS and DDoS Prevention, Exclusive Articles, Featured, Most Common Vulnerabilities, Network Security, Security Fundamentals

What is the SYN Flood? SYN Flood is a type of Denial of Service (DoS) attack in which attackers send a large number of SYN requests to a system and create a huge number of half-open connections. These requests consume lots of server resources such that after some time...

What is Reverse Tabnabbing and how does it work?

CCNA, CCNP, CompTIA, Data Security, End Point Protection, Exclusive Articles, Malware Prevention, Most Common Vulnerabilities, Online Banking Security, Phishing

What is Reverse Tabnabbing? A web page often refers to another web page on a different website. We use a hyperlink or JavaScript to open the referred web page in a new tab. Reverse Tabnabbing is an attack in which a malicious or compromised web page can overwrite the...

What is the IDN Homograph Attack and how does it work?

CCNA, CCNP, CompTIA, Data Security, End Point Protection, Exclusive Articles, Malware Prevention, Most Common Vulnerabilities, Online Banking Security, Phishing

We often use IDN or Internationalized Domain Name to include language-specific scripts in a domain name. This enables us to use Chinese, Arabic, Devanagari, Hebrew, French, or other non-English characters in a domain name. But, attackers often exploit these IDNs for...

What is heap spraying?

CCNA, CCNP, CompTIA, Most Common Vulnerabilities

What is heap spraying? Heap spraying is a technique using which an attacker can write a certain sequence of bytes at a predetermined memory location of a process. Then, the attacker can exploit that to facilitate the execution of arbitrary malicious code. Let's try to...