Cybersecurity Attacks and Vulnerabilities: Definitions and Scenarios

Cross-Site Scripting (XSS)

A code injection vulnerability where an attacker injects malicious script (typically JavaScript) into a trusted website, which then executes in a victim's browser

LDAP injection

A code injection attack that targets LDAP (Lightweight Directory Access Protocol), the protocol used for managing and accessing networked directory resources such as user accounts, by inserting malicious LDAP statements into an application's input

XML injection

A code injection attack that targets web applications using XML to generate, store, or transport data, by inserting malicious XML content into application input

Buffer overflow

An exploit that overwrites the contents of memory beyond an allocated buffer's intended size, causing unpredictable application behavior or enabling further exploitation

Replay attack

An attack where an attacker intercepts a valid data exchange between an application and a server (or another application) and retransmits it to gain unauthorized access or trigger unauthorized actions

Privilege escalation facilitators

Conditions that enable privilege escalation attacks, including system/application vulnerabilities, system/application misconfigurations, and social engineering techniques

CSRF/XSRF (Cross-Site Request Forgery)

An attack that exploits the trust a website has in a user's already-authenticated browser, tricking the user into unknowingly submitting unauthorized web requests that the website then executes

Directory traversal attack (dot-dot-slash attack)

An attack, also called a dot-dot-slash attack, that uses sequences like ../ in a URL to move outside a web application's intended directory and access unauthorized files, such as /etc/passwd

IV attack (Initialization Vector attack)

A wireless attack that exploits WEP's weak, short (24-bit) initialization vector, which gets reused frequently enough that an attacker can capture packets, identify repeated IVs, and mathematically derive the encryption key

War driving

The practice of physically driving or moving around searching for open or vulnerable wireless networks, used for reconnaissance rather than exploiting a specific encryption flaw

SSID spoofing

Creating a fake wireless access point using a legitimate-looking network name (SSID) to trick users into connecting to it instead of the real network

Bluejacking

Sending unsolicited messages or data to a nearby Bluetooth-enabled device; generally a nuisance rather than a serious data theft or control threat

Bluesnarfing

Gaining unauthorized access to a Bluetooth device to steal data such as contacts, messages, or files

Bluebugging

Gaining unauthorized remote control over a Bluetooth device, allowing the attacker to make calls, send messages, or otherwise operate the device as if they were the owner; the most severe of the common Bluetooth attacks

Bluesmacking

A denial of service attack against a Bluetooth device, overwhelming it with traffic to crash or disable it

Scenario: An attacker captures enough WEP-encrypted packets to identify repeated 24-bit initialization values and uses that repetition to derive the encryption key. What attack is this?

IV attack

Scenario: An attacker sets up a fake access point using the same name as a coffee shop's real Wi-Fi network, hoping customers connect to it instead. What is this called?

SSID spoofing

Scenario: An attacker sends an unsolicited, harmless text message to a stranger's phone via Bluetooth just to annoy them. What is this called?

Bluejacking

Scenario: An attacker gains unauthorized access to a victim's Bluetooth device and downloads their contact list without permission. What is this called?

Bluesnarfing

Scenario: An attacker gains full remote control of a victim's Bluetooth headset or phone, able to place calls as if they were the owner. What is this called, and how does it differ from bluesnarfing?

Bluebugging; more severe than bluesnarfing because it grants full remote control, not just data theft

Scenario: An attacker floods a Bluetooth device with traffic specifically to crash or disable it. What is this called?

Bluesmacking