NT1330 Unit 3 Assignment 3

If successful, this script will give the attacker the access to the console of the target OS.

Script kiddies are defined as an unskilled individual who uses scripts or programs developed by others to attack computer systems and networks, and deface websites. It is generally assumed that script kiddies are juveniles who lack the ability to write sophisticated programming programs or exploits on their own, and that their objective is to try to impress their friends or gain credit in computer-enthusiast communities (Script Kiddie, 2015). By understanding that script kiddies generally don’t have technical skills to create tools to hack, rather are just pointing those tools created by hackers, makes them far more ready to attack at greater numbers, as it doesn’t take particular skill sets in order to launch these attacks. They are able to take the tools that are provided and launch them from as many machines that they either infect or manually launch, and can pass these harmful tools to others with even less technical skill to do the same. They are a low maintenance “human virus” of sorts that can launch attacks on systems 24 hours a day, 7 days a week. On the contrary, currently most professional testing coverage will most likely be run either when a problem is present, or on a yearly basis (if they

Script kiddies are one of the most dangerous and next class of hackers. They are the new generation of users of computer which take advantages of the hacker tools and documentation available over the internet for free. This type of hackers do not have any knowledge of what’s going on behind the scenes. They are typically very sloppy in their actions, just enough to cause you headaches by leaving all sorts of digital fingerprints behind.They need minimum skills to carry out their attacks, they are the guys who are teenager hackers that you hear in the media.

The vulnerability impacts Bash, a run of the mill portion known as a shell that appears in

Rogue Wi-Fi, Homograph, Tabnabing, Evil Twins, Smurf, Ping Flood, SYN Flood, Teardrop, Peer-to-Peer Attack, Banana Attack, NUKE Attack, R-U-Dead-Yet attack, Slammer Worm, MyDoom, DRDOS Attack, Advanced Persistent DoS (APDoS), Stuxnet, Crypto Locker, SQL Injection, Persistent XSS attacks, DOM-based XSS.

Cross-Site Scripting: These attacks are a type of injection issue that is a result of malicious scripts being injected into legitimate web applications. These attacks can lead to the user of the web application being fooled into providing their data to the attacker.

A backdoor is one of the most dangerous parasite types, as it allows a malicious person to perform any possible actions on a compromised computer. The attacker can use a backdoor to

Microsoft Windows was attacked via buffer overflow in August 2003. The attack, known as the Blaster Worm, focused on an already recognized buffer overflow in Windows’ remote procedure call (RPC) facilities. RPC is specific to the Windows operating system. The vulnerability was in Port 135 which handles transmission control protocol (TCP) the language in which a system communicates in. Port 135 did not require authentication about a server it was communicating with. Therefore, the Blaster Worm was able to inundate the port with data, in turn, injecting malicious code into the system. By exploiting this vulnerability in Port 135, the Blaster Worm would install itself on a computer and immediately seek out other susceptible computers. Once infected, the Blaster Worm permitted individuals or an entity to take a myriad of very damaging actions from executing programs to giving others hackers full access to resources and information. Additionally, the Blaster Worm had the ability to instruct a newly discovered susceptible system to download the worm so that the infectious cycle would continue (Hoogstraten, 2003). The antidote to the Blaster Worm virus’ came in the form of a patch issued after it infected an estimated “100,000 Microsoft Windows systems and cost millions in damage” (Bailey, Cooke, Jahanian, Watson, & Nazario, 2005).

The malicious code commonly referred to as payload/shellcode which is a sequence of machine instruction interpretable by the computer’s CPU. Will then be executed.

An attacker can take advantage of many different types of cross site scripting. These include persistent cross site scripting, reflected cross site scripting, and DOM based cross site scripting. An attacker can use a combination of the three as well (server/client cross site scripting) (Acunetix). With persistent cross site scripting attacks, the malicious code is submitted to a website where it’s stored for a certain period of time. The user is not required to interact with an additional site or link, just view the website containing the code. Reflected and DOM based cross site scripting attacks required the user to either visit a specific link that contains malicious code, or visit a malicious site containing a web form that performs the attack. The use of a malicious form is often done when the vulnerable site only accepts HTTP POST requests, which allow the form to be

The modified architecture to screen the attacks would intercept all HTML and Scripts the use of this application proxy. Large volumes of testing data sets collected over time together with the use of modified testing and scanning techniques enables the developers to build the robust systems that is able to scan attacks generated and written in Hypertext Preprocessor PHP and other script capable of generating complex dynamic HTML attacks.

In such cases, a direct entry from the system is required to provide the hacker access. To gain direct entry, therefore, the hacker disguises malware and posts it online for people to download. The malware can be distributed through email links and files, free software and a number of other avenues. An unsuspecting individual then downloads the malware and unknowingly gives access to the hackers.

Exploiting buffer overflows; by executing arbitrary commands on the victim’s system, an attacker may crash a program or minify elements the stack.

Worms effect the computers that are on the same network. A worm will consume bandwidth and will spread to other computers on a network. Worms can also cause a server to crash or make a user’s files unusable or corruption. They can also create a backdoor on a target computer. Rootkit will run its utilities on your computer without your knowledge of it even being there, they are designed to avoid detection. A rootkit, like a worm, can also create a backdoor on target computers allowing a hacker to send things such as spam or emails that can use a target computer to perform a denial-of-service attack on servers. A zombies will open a backdoor on an affected computer to allow predators to use it for malicious purposes without the owner’s knowledge. A Browser hijacker has the ability to change a home page or search page in your browser. An email viruse can potentially harm a computer when an effected email is open opened. The mousetrap ping happens when a website uses a script preventing the Internet user from leaving a website. Last but not least, spam comes in the form of an email usually and it’s junk or bulk emails that come from random senders known as spammers.

The shellshock bug is a little solid to describe unless getting practical and refer some programming language, an attacker can run program by just requesting for elementary data from your computer or without any authorization, a web server or an "internet of things" (IoT) device. So, an attacker may be able to execute this code on public web servers.