Web Application Security

SQL Injection : A SQL injection attack specifically targets the kind of server which stores critical data and uses SQL. They use nasty code to get the server to reveal information it normally wouldn’t. This is especially more dangerous if the server stores confidential information like credit card numbers, usernames and passwords (credentials), or other personally identifiable information.

Cross-Site Scripting (XSS) : XSS attacks to send malicious code to other users of the website by injecting code into the application. Unlike the SQL injection, the Website itself is not attacked but the users who visit the website will be attacked and the malicious code will be run in their browser. One of the most common ways to inject malicious code in the comment box or a textbox. These attacks can lead to yourlead to your customers being infected with malicious code , having their sensitive information stolen.

Denial-of-service(Dos) : In this attack, attackers flood the website with a very high load then it was meant to be. In this case , the attacker is generating thousands of requests from different IPs so as to keep the server busy. In this scenario , the server stops responding to requests thus will not be available. It causes the site to slow down or make it temporarily unavailable.

Session Hijacking and Man-in-the-middle Attacks : The session between your computer and the remote web server is given a unique session ID, which should stay private between the two parties; however, an attacker can hijack the session by capturing the session ID and posing as the computer making a request, allowing them to log in as an unsuspecting user and gain access to unauthorized information on the web server. There are a number of methods an attacker can use to steal the session ID, such as a cross-site scripting attack used to hijack session IDs.