Question

Threats to the security of a website can range from low – some kid tries an attack that they read about on the web – to high…Where what happens? (with a high skill attacker?)

Please explain in 4-5 sentences

Answer 1

`Hey,

Note: Brother if you have any queries related the answer please do comment. I would be very happy to resolve all your queries.

When we talk about low range, in this there are people involved who are just testing what they learnt in their classes or somewhere on website. Although it is unethicaal but, can lead to explore some of the biggest loopholes.

When talking about high. We really need to be cautious because attackers can:

1. Carry out SQL injection attacks to gain access to the database, spoof a user’s identity, and destroy or alter data in the database. SQL injection occurs when malicious SQL statements are inserted into form fields to try and gather information from the database. This information enables the hacker to access, modify or destroy information in the database. With SQL injection, a hacker can change the price of a product, and gain customer information such as credit cards numbers, passwords and contact information.
2. Use Cross-Site Scripting (XSS) attacks to send malicious code to other users of the website by injecting code into the application that then executes on the client side for other users. These attacks can lead to your customers being infected with malware, having their sensitive information stolen, or even having their computer be recruited into large botnets.
3. Make the site temporarily unavailable with a Distributed Denial of Service Attacks (DDoS). DDoS attacks generate requests from thousands of IP addresses in an attempt to flood a site with traffic, making it impossible for the server to respond to requests. DDoS attacks can slow a site down or make it temporarily unavailable.
4. Hijack trusted user sessions to make unwanted purchases on behalf of users with Cross Site Request Forgery (CSRF) attacks. CSRF attacks occur when a user is tricked into clicking a link or downloading a compromised file that executes unwanted or unknown actions on an authenticated user session.

Kindly revert for any queries

Thanks.