Networks
This free packet analyzer’s name suggests a predator lurking in the cables
One way function that takes a large blob of data and generates a fixed byte string
What is hashing
The "best" method of password cracking which involves trying every combination until it works
Brute Forcing
This browser and proxy protocol bounces your network traffic across three separate "nodes", such that no node knows both where you came from and where you're going
What is Tor
This number was the private key chosen by the tls cert authority eMudrah
This helps you find ip address of website names. (full name)
(When the network has issues, Its always _____)Domain Name System
Asymmetric encryption based on inverse log
What is RSA
What is command injection?
Phishing over the phone
What is Vishing
This Linux kernel privilege escalation vulnerability sparked the discovery of several other vulnerabilities similar to it across multiple kernel versions
What is CopyFail
Smurf attack
What is initiating a ping request with the victim ip address to have a bunch of other machines ping the victim machine for you
This key exchange algorithm allows for a common secret to be obtained through sharing a number openly and combining it with individual secret keys
Diffe-Hellman key exchange
<img src="rnt" onerror=alert(1)>
What is XXS?
A type of malware that spreads to other hosts on the network autonomously
What is a worm
This recent vulnerability was a remote code execution in html 5 and affected which browsers
What is google chrome?
OSI layers.
What is
Physical
Data
Network
Transport
Session
Presentation
Application
The problem with Electronic Codebook (ECB) as a block cipher
Retains patterns in the data, very weak to cracking
This is the process of getting around filters by using html codes like %2e%2e%2f instead of '../'
Image metadata that may contain identifying information if you're not careful
What is EXIF data
This is how php to shell (the recent php vulnerability) worked
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
ARP spoofing, SSL stripping and rogue APs are common techniques for carrying out this interception attack
What is Man in the Middle attack
googling "---RSA BEGIN PRIVATE KEY---" is known as _____.
google dorking
I'm a little teapot, short and stout
What is HTTP status code 418 I'm a Teapot
A niche but most common alternative to Tor, only allowing access to sites within the network
What is I2P
The workings of any of the linux vulnerabilities leaked by Trend Micro’s Zero Day Initiative