CompTIA Security+ SY0-601 Exam Cram, 6th Edition

Chapter 3

Application Attacks

This chapter covers the following official Security+ exam objective:

• ▶ 1.3 Given a scenario, analyze potential indicators associated with application attacks.

Essential Terms and Components

• ▶ privilege escalation

• ▶ cross-site scripting (XSS)

• ▶ injection

• ▶ directory traversal

• ▶ buffer overflow

• ▶ race condition

• ▶ time-of-check to time-of-use (TOCTOU)

• ▶ error handling

• ▶ improper input handling

• ▶ replay attack

• ▶ integer overflow

• ▶ cross-site request forgery (CSRF)

• ▶ server-side request forgery (SSRF)

• ▶ application programming interface (API) attack

• ▶ resource exhaustion

• ▶ memory leak

• ▶ Secure Sockets Layer (SSL) stripping

• ▶ shimming

• ▶ refactoring

• ▶ pass-the-hash attack

The attacks discussed so far in this book, ...