Scribd
Upload
16 views3 pages

SQL Injection

The document outlines various cybersecurity threats including SQL Injection, PowerShell Vulnerability, and Distributed Denial of Service (DDoS) attacks. It details the nature of these threats, their root causes, potential consequences, and methods for prevention using security testing with CAI. Key prevention strategies include input validation, using prepared statements, and restricting access to PowerShell and WinRM services.

Uploaded by

tellamen100
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
16 views3 pages

SQL Injection

The document outlines various cybersecurity threats including SQL Injection, PowerShell Vulnerability, and Distributed Denial of Service (DDoS) attacks. It details the nature of these threats, their root causes, potential consequences, and methods for prevention using security testing with CAI. Key prevention strategies include input validation, using prepared statements, and restricting access to PowerShell and WinRM services.

Uploaded by

tellamen100
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

SQL Injection

SQL Injection is a code injection attack where an attacker inserts malicious SQL queries into input fields
Nature of the Threat (login forms, search bars, URL parameters)
It targets Web applications Databases (MySQL, PostgreSQL

No input validation Dynamic SQL query construction


Root cause
No parameterized queries Trusting user input

Authentication bypass Full system compromise


Consequences
Data theft (user data, passwords) Data modification

[Link] HTTP service via nmap 3. Analyzes response differences


Security testing using CAI
[Link] login/search endpoints [Link] injection pattern

Use prepared statements


Input sanitization
How CAI Prevents ORM frameworks
Web Application Firewall (WAF)
Disable detailed SQL errors
PowerShell Vulnerability

Security testing using


Nature of the Threat Root cause Consequences How CAI Prevents
CAI

Attackers exploit PowerShell Unrestricted PowerShell Remote code execution Detect open WinRM / Set ExecutionPolicy =
on Windows systems to: execution Malware installation SMB ports RemoteSigned
Execute malicious scripts ExecutionPolicy set to Credential dumping Identify Windows version Enable ScriptBlock
Download payloads Unrestricted Domain compromise Check PowerShell logging
Perform lateral movement No logging enabled Persistence via scheduled version remotely Enable PowerShell
Escalate privileges Outdated Windows tasks Analyze: transcription logs
patching Execution policy Restrict WinRM access
Admin privileges exposed Logging settings Patch Windows
Simulate safe command
execution test
Distributed Denial of Service (DDoS)

Security testing using


Nature of the Threat Root cause Consequences How CAI Prevents
CAI

DDoS is an attack where No rate limiting Service downtime Detect open WinRM / Set ExecutionPolicy =
multiple machines flood a No traffic filtering Revenue loss SMB ports RemoteSigned
target server with traffic, No load balancing Reputation damage Identify Windows version Enable ScriptBlock
overwhelming resources. No DDoS protection SLA violations Check PowerShell logging
Types: Poor infrastructure scaling version remotely Enable PowerShell
HTTP flood Analyze: transcription logs
SYN flood Execution policy Restrict WinRM access
UDP flood Logging settings Patch Windows
Simulate safe command
execution test

You might also like