Security attacks, tools, counter measures

Security attacks

This list shows an overview of security attacks per area, including a description, tools involved and counter measures.

Any attack missing? Fill in the contact form!

Attack	Description	Tools	Counter tools	Counter measures
Hardware
DRAM chip freezing	This is done to exploit the little-known vulnerability of the DRAM chip, which can restore data while frozen			Physical protection of host
Mod chipping	By placing a mod chip, protection layers can be circumvented
Network
ARP poisoning	By polluting ARP tables of switches/hosts, machines can be redirected to a man-in-the-middle host.	Cain & Abel
CAM Overflow / MAC flooding	Flooding a switch port with different MAC source addresses, trying to consume all the available memory. In some cases this could lead to a state in which the switch leaks data to other ports.			Enable MAC limiting
Denial of Service	Limiting the remaining resources of the victim, by overloading it with a high amount of, or malicious requests.
Man-in-the-middle	aka bucket-brigade attack
Traffic sniffing	Sniffing network traffic when having access to the wireless or physical network	dsniff
Passwords
Dictionary attacks
Rainbow table attack
Weak password		John the Ripper		Using strong password policy
Software
Backdoor
Data hiding	Compressing (APX)
Reverse engineering
Rootkit			Chkrootkit, Rootkit Hunter, Skdet
Trojan
Web applications
Back-end authentication
Buffer overflow
Credential management
Cross site scripting (XSS)
MAC spoofing
Password in memory
Session hijacking
SQL injection
URL manipulation
Weak keys	WEP uses a weak key mechanism
Web server configuration

Projects
» FreeBSD Easy Installation Generator
» Lynis
» Rootkit Hunter

Guides
» Architecture Best Practices
» OpenLDAP book (LPIC-3, 117-301)
» SNIA SCSE (S10-201)

About
» About me

Thanks to
» Contributors
» Sponsors

"A master piece of software and a must for every server admin." - Jose

Tip: Want to know everything about the latest changes and additions?
» Join the notification list

[PHPips enabled]

Hosted by Shock Media