Скачать или смотреть What are Software Vulnerability And Different Type of Vulnerability

Description
#cisco #feelssafe #vulnerability #Ethical_Hacking
Chapter 2: Attacks, Concepts, and Techniques
Topic: Software Vulnerability
Introduction of cyber-security for absolute beginners, School and College Students.

** Lecture Links **
Blog-Post:   / top-three-software-vulnerability  
Backdoor: https://www.imperva.com/learn/applica...

** Important Links **
Article: https://economictimes.indiatimes.com/...
Take Note: https://www.notion.so
Check fraud Links: https://wheregoes.com/
Check if Password already Hack: https://haveibeenpwned.com/

** feelsafe **
Discord :   / discord  
Medium :   / feelsafesafer007  
Twitter :   / feelsafesafer  
Instagram:   / feelsafe_safer007  

** who am i **
Linkedin :   / vishal-shakaya-0a5b561b1  
Instagram :   / vishal_shakya007  
facebook :   / vishal.shakaya.90  

** Top Three Software Vulnerability **

** 1 Buffer Overflow **
When Program runs in the system and uses allocated space but when use more than space allocated and that space used by the program cause system crash or privilege escalation more...

** 2 Invalid Input **
When Program or website does not filter user input then, some invalid input leads to create vulnerability.
Example :

1 SQL INJECTION: when entering SQL query to web input filed if the web does not use input filter then may it return a result that hacker uses to exploit server as root then, Extract username and password are very easy.

2 Hijack system: Suppose A website uses an image upload system then a hacker used a malicious image that he created, upload the image malicious code executes in that uploaded server, and may enable reverse connection to the attacker.

** 3 Race Code-execution **
The program code executes at a particular time and when the code does not execute at the time of execution that leads to code execution vulnerability the Attacker uses this missing time interval for executing malicious code.
The Malicious Code could be anything that may crate reverse shell or perform some action that's may harm the system or leak sensitive information