Answer Questions - Assignment Example

Due: Computer sciences and Information technology: Question one What search string would you use with Google to locate a Web server that was offering up a directory listing of the /etc directory, including the password file?[Directory String] + (inurl:)[file type] + [limitors]Question two You are analyzing network traffic and you see the string dXNlcjpwYXNzd29yZA== in a Web request where the client is authenticating with the server. The username from this request is  and the password is.

Question three Before you embark on a penetration test, what is the very first thing you want to get?Reconnaissance- I should first identify publicly accessible services from the home network such as web servers or emails.Question four What type of scan are you running if you use the following? Nmap –sS 192.168.0.0/2?Port Scanning by ping sweeping using NmapQuestion five What tool would you use to get passwords on a voice over IP network? VoiPongQuestion six You find the following in Web logs.

 POST/scripts/postit. php?p=%3Ealert (document. Cookie ())%3C%2Fscript%3E. What is going on?It shows the URL is encoded using a custom scheme by the web and the javaScript is not isolated in the URL parameter.Short essay answer:Question seven Is a vulnerability scanner completely accurate and reliable? Why or why not?NO. Because vulnerability scanner will only identify the possible vulnerabilities based on other network responses that are not what they seem.Question eight You see someone using the command "nc www.google.com 80".

What is it they are trying to do?They are trying to test a transmission control protocol connection to a remote host (www.google.com) on port 80.Question nine Explain clearly, in your own words, what a buffer overflow is.Buffer overflow is a software bug that happens when sequence of instructions coded to a physical memory storage are overstored than intended.Question ten You are periodically running vulnerability scans on your Web server. One day it indicates to you that Firefox has a security vulnerability that could allow for a privilege escalation.

How concerned are you about this finding? Include your reasoning.These vulnerabilities are caused by errors in Mozilla maintenance service when interacting with local programs. This may result to security breach as attackers may conduct some spoofing attacks by using special modified URI. I will counteract this by either upgrading the Mozilla or scanning various server ports.Multiple choicesQuestion eleven Which of the following technologies are CLIENT side?HTML HTTP PHP Flash Perl HTML and HTTPQuestion twelve Which of the following technologies are SERVER side?

JavascriptHTTPPHPRubyHTML PHP, Ruby, JavaScipt Works cited Stephen Northcutt, Jerry Shenk, Dace Shackleford, Rim Rosenberg, Raul Siles and Steve Mancini. “Penetration Testing: Assessing Your Overall Security Before Attackers Do.” 2006. PDF File