Types of hacker attacks on web resources

[частный детектив Кременчуг]

Mailbombing

The oldest type of attack. Significantly increased traffic and the number of messages sent, which generates a malfunction in the service. This causes paralysis not only of your mail, but also the operation of the mail server itself. These days, the effectiveness of such attacks is considered to be zero, because now the provider has the ability to set traffic restrictions from one sender.

Viruses, Trojans, Mail Worms, Sniffers

This type of attack combines various third-party programs. The purpose and principle of operation of such a program can be extremely diverse, so it makes no sense to dwell on each of them. All these programs are united by the fact that their main goal is access and "infection" of the system.

Buffer overflow

The principle of this type of attack is software errors, in which memory violates its own boundaries. This, in turn, forces either to terminate the process abnormally or to execute arbitrary binary code where the current account is used. If the account is an administrator, then these actions allow you to get full access to the system.

Network intelligence

This type of attack does not in itself involve any destructive action. Intelligence involves only the collection of information by an attacker - port scan, DNS query, computer security check and system check. Usually, reconnaissance is carried out before a serious targeted attack.

Packet sniffing

The principle of operation is based on the features of the network card. Packets received by her are sent to processing, where special applications interact with them. As a result, the attacker gains access not only to information about the structure of the computing system, but also directly transmitted information - passwords, messages, and other files.

IP spoofing


A type of attack on local networks when an attacker’s computer uses the IP address included in this local network. An attack is possible if the security system provides for identification of the IP address type, excluding additional conditions.

Man-in-the-middle


An attacker intercepts a communication channel between two applications, as a result of which he gains access to all information passing through this channel. The purpose of the attack is not only theft, but also falsification of information. An example of such an attack is the use of a similar application for fraud in online games: information about a game event generated by the client part is transmitted to the server. An interceptor program is installed in its path, which changes the information at the request of the attacker and sends it to the server instead of the one sent by the game client program.

Injection


There is also a fairly wide type of attacks, the general principle of which is the implementation of information systems with third-party pieces of program code in the course of data transfer, where the code does not actually interfere with the application, but at the same time produces the necessary action for the attacker.

Denial of Service, DoS

- Visualization of DoS attacks, requests to different system ports per second

DoS (from the English. Denial of Service) is an attack that aims to cause the server to not respond to requests. This type of attack does not directly imply obtaining some secret information, but is used to paralyze the work of target services. For example, some programs may cause exceptional situations due to errors in their code, and when services are disabled, they can execute code provided by an attacker or avalanche-type attacks when the server is unable to process all incoming packets.

DDoS (from the English Distributed Denial of Service - Distributed DoS) is a subtype of DoS attack, which has the same goal as DoS, but not from one computer, but from several computers on the network. In these types of attacks, either the occurrence of errors that generate a service failure or the operation of a protection that blocks the operation of the service, and as a result also a denial of service, are used. DDoS is used where conventional DoS is ineffective. To do this, several computers are combined, and each makes a DoS attack on the victim's system. Together, this is called a DDoS attack.

Ways to protect against network attacks

There are many ways to protect against cybercriminals, including antiviruses, firewalls, various built-in filters, etc. The most effective is the professionalism of the user. You should not open suspicious sites (links), files in letters from the sender of the "mysterious stranger" type. Before opening attachments from familiar addresses, you should ask for confirmation in some other way than mail. As a rule, computer skills and literacy courses conducted in almost any organization can help. This, however, does not replace defense mechanisms and programs. It is worth remembering that the technology of network attacks does not stand still and therefore it is necessary to update the antivirus as often as possible, as well as conduct full computer checks.

This material was written by KLiK specialists

 

[Агентство. PrivacyGuard.]

The post is of course interesting, only firstly it was copied incorrectly (images are not shown), and secondly it does not contain anything specific.

It is unclear how sniffers got to viruses and trojans, besides IP spoofing there is also MAC spoofing, the Injection section contains neither XSS (active, passive) nor fuzzing ... it’s a pity that they didn’t even mention such a threat as a bot-net .

You are my necromancer, what did you want with this post? I hasten to assure you now that everything is far from simple ...

 

[Детективное агентство ИКС-Инфо.]

The post is of course interesting, only firstly it was copied incorrectly (images are not shown), and secondly it does not contain anything specific.

It is unclear how sniffers got to viruses and trojans, besides IP spoofing there is also MAC spoofing, the Injection section does not contain either XSS (active, passive) or fuzzing ... it is unfortunate that they did not even mention such a threat as a botnet .

You are my necromancer, what did you want with this post? I hasten to assure you now that everything is far from simple ...

Colleagues!!!
So many "obscene words" I have not heard for a long time: lol:
Personally, I'm a Teapot (with a capital letter). It is possible for people like me - in a simpler, human way
By the way, it’s not bad somewhere in a semi-private place to organize an educational program for those with a capital, eh?

Yours faithfully

 

[частный детектив Кременчуг]

The post is of course interesting, only firstly it was copied incorrectly (images are not shown), and secondly it does not contain anything specific.

It is unclear how sniffers got to viruses and trojans, besides IP spoofing there is also MAC spoofing, the Injection section does not contain either XSS (active, passive) or fuzzing ... it is unfortunate that they did not even mention such a threat as a botnet .

You are my necromancer, what did you want with this post? I hasten to assure you now that everything is far from simple ...

Firstly, when I wrote a topic they called me, I had to finish work on the computer and go away on business.
Secondly, I was not going to lay out a manual for novice hackers.
Thirdly, if I did not write all types of attacks, so add, create a new topic.
Fourth, I did not insult you.
Fifthly, this topic was created in a certain section, for general development - so that users understand what threats exist. At the end of the topic are safety recommendations.

 

[Агентство. PrivacyGuard.]

Good afternoon.

To be honest, I did not try to insult. If I offended you, I apologize. : roll:
Just this topic is very wide and deep. In general, any information is useful. And this information, too, is for starters. However, it must be pointed out that the above classification is not complete. In addition, modern hackers use complex combined attacks. My colleagues and I will try, as far as possible, to spread information on existing attacks. It's just that you can’t post it in one post. But we will definitely post recommendations on protection in the near future. It’s already ready for safe work in the Internet banking, and the general one will be later. Although they are very similar.