Premium Resources

Training Courses

Free Resources

Web Services Attacks

The vulnerabilities in the web service protocols like SOAP, WSDL, UDDI can be exploited to do various kinds of attacks like SQL injection, XML poisoning, etc.

File Uploads:

This attack happens wherein a user is able to upload all types of file extensions even though the upload is intended only for few extensions. This is due to improper validation against the type of files getting uploaded, an attacker will be able to upload malicious files.

DNS Hijacking/Poisoning:

If an attacker is able to get access to the DNS files, he can modify the contents of the DNS records so that he can redirect the victim to a malicious web page, though they are requesting for a legitimate web page. DNS Server does the domain to IP resolving; so when a DNS poisoning is executed to modify the IP corresponding to a domain to some other IP, the attacker can trick the victim into browsing the pages he intended them to instead of the original ones.

Poisoning can be done at cache/DNS server, or an attack can modify the IP on the fly by intercepting the traffic too.

Image Source: https://commons.wikimedia.org/wiki/File:Dns-cache-poisoning.png

Image Source: https://www.keycdn.com/support/dns-spoofing/

What is Hacking? What is Ethical Hacking? Who is an Ethical Hacker?

CIA Triangle Important characteristics of Information Security, Functionality and Usability Triangle Phases of Hacking Different types of attacks Vulnerability Assessment Penetration Testing Information Security Laws, Standards and frameworks

What is Footprinting Objectives of Footprinting Footprinting Methodology

What is Scanning? Network Scanning Scanning Methodology

Enumeration and its Types NetBIOS Enumeration SNMP Enumeration LDAP Enumeration NTP Enumeration SMTP Enumeration DNS Enumeration

Goals of System Hacking Gaining Access Privilege Escalation Executing Applications Hiding Files Covering Tracks

Introduction to Malware Threats and its Types Virus Trojans Worms Rootkits, Spyware and Ransomware How to Detect Malicious Software

Sniffing and its Types ARP and CAM Table Active Sniffing Attacks DHCP Poisoning

Social Engineering and its Attacks Computer and Mobile Based Social Engineering

Denial of Service attacks and its Types

Session Hijacking and its Types Session Hijacking Process Session Hijacking Levels Network or TCP Session Hijacking

Web Server and its Types of Attacks

Web Application and its types of Attacks Injection Flaws Cross-Site Scripting Web Services Attacks Hacking Methodology

Introduction to SQL Injection Types of SQL Injection

Introduction to Hacking Wireless Networks Encryption Types Wi-Fi Attacks

Introduction to Hacking Mobile Devices Android Types of Android Attacks IOS Mobile Device Management

Firewall IDS: Intrusion Detection System Ways of Detecting Attacks

Introduction to Cryptography PKI: Public Key Infrastructure SSL: Secure Socket Layer

Introduction to Cloud Computing Types of Cloud Computing Benefits, Threats, and Attacks on Cloud Computing Security in Cloud

Premium Resources

Free Resources

Web Services Attacks

File Uploads:

DNS Hijacking/Poisoning:

PMP Home

Introduction to Project Management

The Project Environment

Role of the Project Manager

Integration Management

Scope Management

Schedule Management

Cost Management

Quality Management

Resource Management

Communication Management

Risk Mangement

Procurement Management

Stakeholder Management

Trends and Emerging Practices

Considerations for Agile/Adaptive Projects

PMI-ACP Home

Agile Estimation

Agile Frameworks and Terminologies

Introduction on Scrum

Agile Risk Management

Soft Skills

Introduction on Lean

Value Priority

Agile Techniques

Agile Metrics

Communications Management

Agile Planning

Ethical Hacking

Introduction to Ethical Hacking

Footprinting and Reconnaissance

Scanning

Enumeration

System Hacking

Malware Threats

Sniffing

Social Engineering

Denial of Service

Session Hijacking

Hacking Web Servers

Web Application Attacks

SQL Injection

Hacking Wireless Networks

Hacking Mobile Devices

Evading Firewall/IDS and Honey Bots

Cryptography

Cloud Computing

CAPM Home

CAPM Framework and Life Cycle

Project Management Processes

Integration Management

Scope Management

Time Management

Cost Management

Quality Management

Human Resource Management

Communication Management

Risk Management

Procurement Management

Stakeholder Management

Lean Six Sigma Black Belt Home

Define Phase

Measure Phase

Analyze Phase

Improve Phase

MiniTab

PRINCE2 Home

Overview of PRINCE2

PRINCE2 Business Case

Introduction on the Quality theme in PRINCE2

PRINCE2 Foundation Plans

PRINCE2 Risk Theme

PRINCE2 Change Theme

PRINCE2 Progress Theme

Starting up Project Process in PRINCE2