Ethical Hacking: Techniques, Tools, and Countermeasures, 4th Edition
by Michael G. Solomon, Sean-Philip Oriyano
Categories of Risk
Risks inherent in web servers can typically be separated into three categories, each of which is examined in more detail in this chapter. Each of these risk categories can be matched to the environments in which the users operate:
-
Server defects and misconfiguration risks—Risks in this category include the ability to extract information from a server, run scripts or executables remotely, enumerate servers, and carry out denial of service (DoS) attacks. Attacks in this space are generally associated with the types of attacks a server administrator or webmaster would encounter.
-
Browser- and network-based risks—These risks include an attacker capturing network traffic between the client (web browser) and the server.
-
Browser ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access