Cyberstudy
PDF p.367 In progress

URL Analysis

Open PDF at p.367 21 flashcards

Summary

PDF p.367

URL analysis is crucial for detecting session hijacking, replay, forgery, and injection attacks. It involves examining the structure and content of URLs to identify potential malicious activity.

Detailed explanation

PDF p.367
  • Uniform Resource Locator (URL)
    • Function: Points to the host or service location on the Internet and can encode actions or data.
    • HTTP Operation
    • Client Request: Made by a user-agent (e.g., web browser) to an HTTP server.
    • TCP Connection: Used for multiple requests or new connections for different requests.
    • Request Components: Method, resource (URL path), version number, headers, body.
    • Principal Methods
      • GET: Retrieve a resource.
      • POST: Send data for processing.
      • PUT: Create or replace a resource.
    • Data Submission: Via POST/PUT methods or encoded within the URL.
    • Query Parameters: Formatted as name=value pairs, delimited by ampersands.
  • Server Response
    • Components: Version number, status code, message, optional headers, message body.
    • HTTP Response Codes: Examples include 200 (OK) and 404 (Not Found).
  • Percent Encoding
    • Purpose: Allows submission of any character (safe or unsafe) within the URL.
    • Reserved Characters: Used as delimiters within URL syntax.
    • Examples: : / ? # [ ] @ ! $ & ' ( ) * + , ; =
    • Unsafe Characters: Control characters like null string termination, carriage return, line feed, end of file, tab.
    • Legitimate Uses: Encoding reserved characters and submitting Unicode characters.
    • Misuse: Obfuscating URLs and submitting malicious input.

Important terms

taken from the text above
Client Request
Made by a user-agent (e.g., web browser) to an HTTP server.
TCP Connection
Used for multiple requests or new connections for different requests.
Request Components
Method, resource (URL path), version number, headers, body.
GET
Retrieve a resource.
POST
Send data for processing.
PUT
Create or replace a resource.
Data Submission
Via POST/PUT methods or encoded within the URL.
Query Parameters
Formatted as name=value pairs, delimited by ampersands.
HTTP Response Codes
Examples include 200 (OK) and 404 (Not Found).
Reserved Characters
Used as delimiters within URL syntax.
Unsafe Characters
Control characters like null string termination, carriage return, line feed, end of file, tab.
Legitimate Uses
Encoding reserved characters and submitting Unicode characters.
Misuse
Obfuscating URLs and submitting malicious input.
URL Uniform Resource Locator

What I should remember

Key Points PDF p.367
  • URL Function
    • Host/Service Location: Encodes actions or data.
    • HTTP Operation: Client requests, TCP connections, request components.
    • Methods: GET, POST, PUT.
    • Data Submission: POST/PUT methods, URL encoding.
    • Query Parameters: Name=value pairs.
  • Server Response
    • Components: Version number, status code, message.
    • Response Codes: 200 (OK), 404 (Not Found).
  • Percent Encoding
    • Purpose: Submit any character within URL.
    • Reserved Characters: Delimiters in URL syntax.
    • Unsafe Characters: Control characters.
    • Legitimate Uses: Encoding reserved characters, Unicode.
    • Misuse: Obfuscating URLs, malicious input.