AK教程:AK47的速点小技巧

怒伯 · 发表于 2013-5-29 11:54:08

* SQL Injection: Is a technique used to obtain, read and modify information/data from applications. This can be done by inserting or injecting a SQL query via the input data from an application.
* Remote Command Execution: This allows an attacker to execute operating system commands due to inadequate input validation. When attackers gain access to the system, they can execute commands from remote locations.
* Weak Authentication and Authorization: Authentication mechanisms that don’t prohibit multiple failed logins can be attacked. When an attacker gains access to login information, he/she can have full access to documents, emails, pictures, ability to puter settings, etc.