PDF p.363
In progress
Forgery Attacks
Summary
PDF p.363Forgery attacks hijack authenticated sessions to perform actions without the user's consent. Common types include Cross-Site Request Forgery (CSRF) and Server-Side Request Forgery (SSRF).
Detailed explanation
PDF p.363-
Cross-Site Request Forgery (CSRF)
- Mechanism: Exploits applications using cookies for authentication and session tracking.
-
Process
- Attacker convinces the victim to start a session with the target site.
- Attacker sends an HTTP request to the victim's browser to spoof an action on the target site (e.g., changing a password).
- The target site accepts the request if it assumes the browser is authenticated.
- Confused Deputy Attack: Another term for CSRF, where the site is tricked into performing actions on behalf of the attacker.
-
Server-Side Request Forgery (SSRF)
- Mechanism: Causes a server application to process arbitrary requests targeting another service.
-
Process
- Exploits lack of authentication between internal servers and weak input validation.
- Targets cloud infrastructure with multiple layers of servers (client interface, middleware, database).
- Public server executes requests on internal servers with its privilege level.
Important terms
taken from the text above- Confused Deputy Attack
- Another term for CSRF, where the site is tricked into performing actions on behalf of the attacker.
CSRF Cross-Site Request Forgery
SSRF Server-Side Request Forgery
What I should remember
Key Points PDF p.363-
CSRF
- Exploits Cookies: For authentication and session tracking.
- Process: Victim starts session, attacker sends spoofed request.
- Confused Deputy Attack: Site performs actions on behalf of the attacker.
-
SSRF
- Targets Servers: Processes arbitrary requests.
- Exploits: Lack of internal authentication, weak input validation.
- Cloud Infrastructure: Multiple server layers, public server executes internal requests.