Top 10 webhacking techniques in 2015

Follow the main types of attacks launched last year and prepare your network.

Security specialists have compiled a list of the top 10 webhacking techniques faced by network security teams over the past year. This topic highlights key network vulnerabilities, giving them a clue as to which sectors should receive more attention and investment.

Are RECORDED CALLS admissible in court? (Europe)

Join us:

1- FANTASTIC

This is an SSL/TLS vulnerability discovered early last year, they gave it the name FREAK. The attack allows an attacker to eavesdrop on HTTPS connections between vulnerable clients and servers by forcing them to use weak encryption, which can then be broken, making it easier to steal or manipulate data. One of the ways to combat this invasion is to keep the latest browser version installed, as these types of attacks have already been fixed. If you are a professional running a server, the tactic is to disable all encryption suites that have a poor reputation. Now, for system administrators, the advice will be to certify the validity of the current TLS libraries, as well as ensuring that your software does not offer export of cipher sets.

2- Traffic jam attack

This type of invasion is reminiscent of the FREAK attack, but is due to a flaw in the TLS protocol rather than an execution vulnerability, and attacks a Diffie-Hellman attack rather than an RSA key modification. Logjam affects any site, browser, mail server, and other services that depend on DHE_EXPORT encryption support.

3- Timing attacks

This is a side-channel attack well known among cryptographic failure specialists, in which the attacker attempts to compromise a network by analyzing the time it takes to execute certain cryptographic algorithms. However, the complexity of the action still allows it to be one of the most common attack types..

4- Invasion of XSS filters

An academic study has shown that it is possible to invade the XSS filters of all popular web firewall applications, proving that firewalls do not protect against invasions as expected. The conclusion of the study indicates that the best way to handle a security vulnerability is not through a firewall but by investigating the root cause of the vulnerability and fixing it. Using web application firewalls does not completely protect your network from attacks and breaches, but it can cause attackers to spend additional time in the scanning process.

Skills required of Cloud Computing professionals

5- Abuse CDN with SSRF Flash and DNS

It’s unlikely that a bug will affect almost all CDNs and leave them vulnerable, but when that happens the possibilities are endless and potentially disastrous. A study presented at Black Hat in 2015 showed support for a set of attack standards that can be used against content delivery networks to target a wide range of highly available sites, and verified that thousands of sites featuring the most popular CDNs are at risk.

6- TLS illusion

An attack standard capable of destroying X.509 PK security architecture protests through the use of CA certificates that include a secretly embedded backdoor.

7- XXE scan in file analysis feature

An XML External Entity (XXE) attack is a type of attack that occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack can cause disclosure of confidential data, denial of service, port wiping from the perspective of the machine on which the analyzer is located, among other effects on the system.

8- Using XSLT for practical attacks

THE XSLT is used to create XSL documents which, in turn, define the presentation of XML documents in search engines and other applications that support it. However, hackers have abused its functions to invade the system, putting the integrity and confidentiality of user information at risk..

9- Magic hashes

PHP programmers constantly struggle with equal-equal (==) operators, which have a particular implication for password hashes. Password hashes in PHP can come in the form of «0e812389…». The problem lies in the comparison between == and 0e, which transform all digits into a complete sequence, being treated as a float.

10- Asynchronous vulnerabilities

One study pointed out that through unsynchronized information requests to access browsers, hidden vulnerabilities can be found based on the backend and profits.

Sources:

http://www.darkreading.com/endpoint/top-10-web-hacking-techniques-for-2015-/d/d-id/1325281?image_number=4
https://freakattack.com/
https://weakdh.org/
https://www.youtube.com/watch?v=KirTCSAvt9M
http://blog.mazinahmed.net/2015/09/evading-all-web-application-firewalls.html
https://www.mazinahmed.net/uploads/Evading%20All%20Web-Application%20Firewalls%20XSS%20Filters.pdf
https://www.youtube.com/watch?v=ouBwRZJHmmo
https://www.youtube.com/watch?v=bUcd-yibTCE
https://www.whitehatsec.com/blog/magic-hashes/
https://vimeo.com/ondemand/44conlondon2015