Attacks Though Commands

Command Channel Attacks



A command channel attack is one that directly attacks a particular service's server by sending
it commands in the same way it regularly receives them(down it command channel).

There are two Types of Command Channel Attacks

1.Attacks that exploit valid commands to do undesirable things

2.Attacks that send invalid commands and exploit server bugs ind dealing with invalid input.

Command Prompt CMD

Data Driven Attacks

A data driven attacks is one that involves the data transferred by a protocol, instead of the server
that implements it.

There are two types of data driven attacks

Blocking The Attacks

SSL Connection

1.Attacks that involve evil data
2.Attacks that compromise good data

Viruses transmitted in electronic mail messages are data driven attacks that involve evil data

Attack that steal credit card numbers in transit are data driven attack that compromise good data

Third Party Attacks


A third-party attack is one that doesn't involve the service you're intending to support at all but that uses the provisions you've made to support one service in order to attack a completely different one. For instance, if you allow inbound TCP connections to any port above 1024 in order to support some protocol, you are opening up a large number of opportunities for third-party attacks as people make inbound connections to completely different servers.

Stolen Life

More

Attacks Though Commands

Web Application Problems
TCP/IP  
Boot Virus

 

Ethical Hacking

Being a hacker does not mean being a delinquent.Nowadays,companies are hiring services from “ethical Hackers “ to detect vulnerabilities of their computer science system and therefore,improve their defense measures.
Ethical Hackers,with their knowledge,help to define the parameters of defense.They do “controlled” attacks,previously authorized by the organization, to verify the system’s defenses.they create groups to learn new attack techniques,exploitations and vulnerabilities, among others,They work as researchers for the security field.

Technorati Tags: Hacking,Ethical Hacking,Internet,Security,Intenet access,OSSTMM

Attack is the secret of defense;defense is the planning of attack  by Sun Tzu
Ethical hacking is divided in several Phases :

• Attack Planning
• Internet Access
• Test and Execution of an attack
• Gathering information
• Analysis
• Assessment and Diagnosis
• Final Report.

Ethical Hackers use the OSSTMM methodology(open source security testing methodology manual).This methodology is for the testing of any security system,from guards and doors to mobile and satellite communications and satellites.
TCP/IP model
Topologies
HTTP and The Web (Internet)