Injection Vulnerabilities Summary for Security+ Exam

SQL Injection

Malicious SQL queries are inserted into an input field, allowing attackers to manipulate a database.

Attackers can retrieve, modify, or delete data from the database.

Blind SQL Injection

SQL injection where no data is shown directly, but attackers can infer information through true/false responses or timing-based attacks.

Content-based: A page displays different content based on true/false conditions.
Timing-based: Uses boolean commands to slow down responses (e.g., checking if the first letter of a password is 'A' by causing a delay).

Code Injection

Injects malicious code into a system, allowing attackers to run unauthorized commands.

Common with untrusted input handling (e.g., through forms or URL parameters).

LDAP Injection

Exploits web applications that use LDAP by inserting malicious LDAP statements.

Attackers can manipulate or retrieve unauthorized information from the directory service.

XML Injection

Inserts malicious XML code into an XML input or query.

Can alter the logic of an XML-based system, allowing unauthorized data access.

DLL Injection

Injects malicious code into a legitimate process's memory, usually through Dynamic Link Libraries (DLL).

Attacker's code runs under the context of another process, often evading detection.

XSS (Cross-Site Scripting)

Inserts malicious scripts (usually in HTML or JavaScript) that are executed in a user's browser.

Common for stealing session cookies or redirecting users to malicious sites.

Command Injection

Allows attackers to execute arbitrary commands on a server.

Injected commands are executed with the privileges of the vulnerable application.

Exploiting Password Authentication

Attackers obtain passwords through social engineering, spying, or credential harvesting.

Phishing attacks or using default passwords to access sensitive data.

Session Hijacking

Attackers steal session information (like cookies) to impersonate a user.

Eavesdropping on network traffic to steal cookies and gain access to user sessions.

Session Replay Attack

Reuses a previously captured session to impersonate the user.

Attackers replay the legitimate user's session commands to gain access.

NTLM Pass-the-Hash Attack

Steals password hashes and uses them to authenticate without cracking the password.

The attacker steals an NTLM hash and tries to use it to access protected resources.

Unvalidated Redirects

Insecure URL redirects that can be exploited to redirect users to malicious sites.

Redirects users to phishing websites, causing them to enter sensitive data.

SQL Injection

Inserts SQL queries into input fields to manipulate databases.

Retrieve, delete, or modify sensitive data from databases.

Blind SQL Injection

Uses indirect methods (like true/false conditions or timing) to infer database information.

Timing-based SQL injection to deduce passwords.

Code Injection

Injects malicious code to run unauthorized commands.

A form collects input, allowing malicious code to run on a server.

LDAP Injection

Injects malicious LDAP statements.

Retrieve unauthorized info from a directory service.

XML Injection

Injects malicious XML code into XML data or queries.

Alters XML logic to gain unauthorized access to data.

DLL Injection

Injects code into a process using a DLL.

Malware runs under a legitimate process to evade detection.

XSS (Cross-Site Scripting)

Injects malicious HTML/JavaScript to exploit user browsers.

Steal session cookies or redirect users to a malicious site.

Command Injection

Executes arbitrary commands on a server.

Exploiting a form field to run shell commands on a web server.