If you are Techpreneur You probably already know that there are lots of different types of hacking which smartly performed by hackers, Now here I have listed and explained, not all but few as well.
1. Injection attacks
This attack happens when there are an errors in your SQL Database, SQL libraries, or even the working framework itself. Users open a page, believing they are safe, but the system hacks their accounts with concealed charge or injection.
When this happens, the hackers have permission to increase unapproved access to private information, for example, standardized saving numbers charge card numbers or other money related information.
2. DNS CACHE POISONING DNS Cache Poisoning, also known as DNS spoofing,has to do with old cache data that still exists on your computer and which is in fact toxic. Hackers are able to highlight this susceptibility in a domain system and avert traffic from real servers to one which enables them to redirect traffic from legit servers to a bogus web address and/or server.
3. SOCIAL ENGINEERING ATTACKS A social engineering attack, although not necessarily a hack, can release private information such as credit card details via legitimate interactions such as email messages, social media platforms, and almost any website. The problem with this kind of attack is that you can be easily caught off-guard.
4. SYMLINKING – AN INSIDER ATTACK A symlink is a type of file that directs to a link on a mounted file system. A hacker can use a symlink to deceive a user into believing they are accessing a correct file when in fact they are not. As a result, the accessed file can be modified to corrupt, destroy, and overwrite information on a system
5. CROSS SITE REQUEST FORGERY ATTACKS A Cross Site Request Forgery Attack occurs when a user logs into an account and a hacker uses the medium to send a fake HTTP request which collects cookie information. Most times the cookies remain viable for as long as the hacker remains logged into the system. This is why most online platforms ask you to log out from an account after you are done using it.
6. REMOTE CODE EXECUTION ATTACKS A Remote Code Execution attack happens when there is weakness with either a server or client security. Vulnerable components may include libraries, remote directories on an unmonitored server, frameworks, and software systems that function with authenticated user access.
7. DDOS ATTACK – DISTRIBUTED DENIAL OF SERVICE ATTACK DDoS, or Distributed Denial of Services, is where a hacker makes a server unavailable for a user so that they can access the system when it goes offline to use a website or specific function to their advantage. The primary purpose of a DDoS campaign is to temporarily halt the proper functioning of a system.
8. CROSS SITE SCRIPTING ATTACKS Cross Site Scripting, otherwise called an XSS assault, happens when an application, URL get demand, or record bundle is sent to the web program window and bypasses the approval procedure. Once an XSS script is set off, its misleading property makes clients trust that the page of a particular site is legit. For instance, if a site has an XSS script in it, the client may see a window requesting their charge card information and other delicate data. This sends the client's session ID to the assailant's site, permitting the programmer to commandeer the client's present session. That implies the programmer has full control over and can perform administrative tasks on a site.
9. BROKEN AUTHENTICATION In the event that the client validation arrangement of your site is weak, programmers can hack the system. Verification frameworks include passwords, key administration, session IDs, and threats that can permit a programmer to get to your record from any PC. In the event that a programmer endeavors the validation and session administration framework, they can steal the client's identity
10. CLICKJACKING ATTACKS Clickjacking, in some cases called UI Redress Attack, happens when a programmer uses different vague layers to trap a client into tapping the top layer without their permission. Hence, the idea is securing clicks that are not meant for a particular page, but rather for a page where the hacker needs them to be. For instance, utilizing a painstakingly made mix of templates, iframes, and content boxes, a client can be persuaded they are writing in the secret word for their financial balance; however,they are really writing into an undetectable form controlled by the assailant
Comentários