Hacking Quizzes Online & Trivia

1. a type of security exploit in which the attacker adds structured query language (sql) code to a web form input box to gain access to resources or make changes to data.-an sql query is a request for some action to be performed on a database. typically, on a web form for user authentication, when a user enters their name and password into the text boxes provided for them, those values are inserted into a select query. if the values entered are found as expected, the user is allowed access; if they arent found, access is denied. however, most web forms have no mechanisms in place to block input other than names and passwords. unless such precautions are taken, an attacker can use the input boxes to send their own request to the database, which could allow them to download the entire database or interact with it in other illicit ways.

1. Illegal

1. a term used to describe the penetration of a network, system, or resource with or without the use of tools to unlock a resource that has been secured with a password-password cracking is the process of recovering passwords from data that has been stored in or transmitted by a computer system. a common approach is to repeatedly try guesses for the password. another common approach is to say that you have forgotten the password and then changing it. the purpose of password cracking might be to help a user recover a forgotten password (though installing an entirely new password is less of a security risk, but involves system administration privileges), to gain unauthorized access to a system, or as a preventive measure by system administrators to check for easily crackable passwords.

True

Type 1 and Type 2

True

A prepared application that takes advantage of a known weaknessA security exploit is a prepared application that takes advantage of a known weakness. Common examples of security exploits are SQL injection, Cross Site Scripting and Cross Site Request Forgery which abuse security holes that may result from substandard programming practice. Other exploits would be able to be used through FTP, HTTP, PHP, SSH, Telnet and some web-pages. These are very common in website/domain hacking.

A type of computer security vulnerability typically found in Web applications that enables attackers to inject client-side script into Web pages viewed by other users Cross-site scripting (XSS) is a type of computer security vulnerability typically found in Web applications that enables attackers to inject client-side script into Web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same origin policy. Cross-site scripting carried out on websites accounted for roughly 80.5% of all security vulnerabilities documented by Symantec as of 2007.

1. an application that captures data packets, which can be used to capture passwords and other data in transit over the network-a packet analyzer (also known as a network analyzer, protocol analyzer, or sniffer, or for particular types of networks, an ethernet sniffer or wireless sniffer) is a computer program or a piece of computer hardware that can intercept and log traffic passing over a digital network or part of a network.[1] as data streams flow across the network, the sniffer captures each packet and, if needed, decodes the packets raw data, showing the values of various fields in the packet, and analyzes its content according to the appropriate rfc or other specifications.

1. a rootkit is designed to conceal the compromise of a computer\ s security.-a rootkit is designed to conceal the compromise of a computers security, and can represent any of a set of programs which work to subvert control of an operating system from its legitimate operators. usually, a rootkit will obscure its installation and attempt to prevent its removal through a subversion of standard system security. rootkits may include replacements for system binaries so that it becomes impossible for the legitimate user to detect the presence of the intruder on the system by looking at process tables.

I dont now