Web based attacks 2025

...vulnerabilities refer to the security risks that the organization identifies and documents.

• OWASP

• NIST

• GCCP

• OSNT

...refers to the inadequate protection of sensitive data, both in transit and at rest.

• Protection Failures

• Network Failures

• Transit Failures

• Cryptographic Failures

...is a broad category of vulnerabilities where an attacker can send malicious data to an application, causing it to execute unintended commands.

• Backdoor

• Information Stealer

• Injection

• Botnet

... vulnerability allows an attacker to coerce the server-side application into making requests to an unintended location, potentially exposing internal services or data.

• External-Side Request Forgery

• Server-Side Request Forgery

• Client-Side Request Forgery

• Internal-Side Request Forgery

...is a common and dangerous web security vulnerability that allows an attacker to inject malicious client-side scripts into web pages viewed by other users.

• XSS

• CSS

• MSS

• VSS

... allows the attacker to embed executable code that the browser will interpret as part of the legitimate page.

• Data input

• User Input

• Code Input

• Page input

The attacker to embed executable code that the browser will interpret as part of the legitimate page called as..

• clone

• steal

• deface

• harvest

The attacker to embed executable code that the browser will interpret as part of the legitimate page called as ..

• Reflected XSS

• Stored XSS

• Steal XSS

• DOM-based XSS

... is an additional layer of defense that allows you to specify which sources of content are trusted by your web application.

• Data Security Policy

• Content Security Policy

• Information Security Policy

• Application Security Policy

...flag prevents client-side scripts from accessing cookies, which can mitigate the impact of an XSS attack.

• Output Encoding

• HttpOnly

• Output Encrypting

• Input cookies