Collaborate Disseminate
There are several obstacles an attacker like Eve must overcome to
issue a fake DNS response that will be accepted. First, an attacker
must issue a response to her own DNS query before the authoritative
name server is… Continue reading What is an external authoritative name server and its effect in DNS cache Poisoning [on hold]
Encode them before executing the page on the user’s web browser (i.e.
NoScript – Firefox plugin)
I’m reading about XSS defenses, the slide describes the quote as “proxy-based XSS defense”. How can NoScript be used this… Continue reading NoScript(Firefox plugin) in terms of security?
What is the difference between TCP Scans and SYN Scans?
Finally, while the IP header contains a noncryptographic checksum for
verifying the integrity of the header, there is no attempt to do the
same for the payload.
Source(Introduction to Computer Security by Michael_Goo… Continue reading IP suite packet integrity
Using Subdomain Resolution for DNS Cache Poisoning
By itself, this
attack accomplishes little—on a successful attempt, the at- tacker
only manages to poison the DNS record for a nonexistent domain. This
is where th… Continue reading Glue record in DNS [on hold]
Another challenge in the resolution of domain names is the possi-
bility of infinite loops. Suppose in the example above, the .com name
server replied indicating that the authoritative name server for the
ex- ample.c… Continue reading How is infinite loop created in DNS query? [on hold]
SYN cookies do not ordinarily allow the use of the TCP options field,
since this information is usually stored alongside SYN queue entries.
What does it mean? Why it is considered as a limitation?
What is the purpose of using random IP addresses in SYN Flood Attack?
Continue reading What is the purpose of using random IP addresses in SYN Flood Attack?
In part prompted by the difficulties in determining the true origins
of DDOS attacks featuring spoofed IP addresses, researchers have
attempted to develop the concept of IP traceback: determining the
actual origin of… Continue reading How does IP traceback works?