Application Attacks

An attacker carries out the _______________ attack to take advantage of the vulnerabilities in the software or operating system in the targeted device.

The process of injecting malicious DLL files to take control of the web application running the target device

• DLL Injection

• Dynamic Link Library

• Driver Manipulation

Tweaked software drivers are installed and used to compromise and take control of the target device

• Driver Manipulation

• Software Injection

• DLL Injection

The act of taking advantage of a bug, a design flaw, or a configuration error in an application or operating system to acquire higher privileges in order to gain unauthorized access to restricted data

• DLL injection

• application escalation

• CSRF

• privilege escalation

CSRF stands for

• Cross-site rename forgery

• Cross-site request forgery

• Cross-site request force

• Cross-site rename force

The malicious exploit of a website where unauthorized commands are submitted from a user's browser to a trusted web application

• DLL injection

• privilege escalation

• CSRF

• improper input handling

The following describes what type of application attack?

An error message displays specific info but reveals unnecessary info which can be taken advantage of by attackers

• privilege escalation

• decoding attack

• error handling

• improper input handling

An ___ attack involves a malicious actor attempting to gain unauthorized access to an application programming interface

What type of application attack is described below?

A valid data transmission is maliciously or fraudulently repeated or delayed by an attacker, who intercepts, amends and resubmits the data to get the receiver to do whatever they want

• API attack

• Replay attack

• Resource exhaustion attack

• privilege escalation

• directory transversal attack

What type of application attack is described below?

Security exploits that crash, hang or otherwise interfere with a targeted program or system.

• replay attack

• error handling

• resource exhaustion attack

• API attack

• directory transversal attack