CEH

Understanding Session Hijacking 299 Now you’re good to go on the traffic capture. You are able to capture the ICMP packets trav ...

300 Chapter 12 ■ Session Hijacking Awesome! Now you have ARP-poisoned both victim machines, and your attack machine is in the m ...

Understanding Session Hijacking 301 Forwarding traffic isn’t a very eventful command, but it’s important to what you are try- i ...

302 Chapter 12 ■ Session Hijacking Exploring Defensive Strategies Session hijacking relies, in part, on many of the prerequisite ...

Exam Essentials 303 importance of understanding packet sequencing for the exam. We also looked at different sources of session I ...

304 Chapter 12 ■ Session Hijacking Review Questions Which statement defines session hijacking most accurately? A. Session hijac ...

Review Questions 305 A. Session splicing B. Denial-of-service C. Source routing D. MITM Jason is a junior system administrator ...

306 Chapter 12 ■ Session Hijacking A public use workstation contains the browsing history of multiple users who logged in durin ...

Review Questions 307 XSS is typically targeted toward which of the following? A. Web applications B. E-mail clients C. Web bro ...

...

Web Servers and Web Applications CEH EXAM OBJECTIVES COVERED IN THIS CHAPTER: ✓ III. Security ■ P. Vulnerabilities ✓ IV. Tools/S ...

A web application is an application that runs on a remote server and is accessed through a client. A web app can take the form o ...

Exploring the Client-Server Relationship 311 The Client and the Server Understanding web applications means that you must also e ...

312 Chapter 13 ■ Web Servers and Web Applications Data Layer Responsible for holding the data and information for the applicatio ...

Exploring the Client-Server Relationship 313 Pieces of the Web Application Puzzle In a web application several components exist, ...

314 Chapter 13 ■ Web Servers and Web Applications The source code of a page could reveal something like the following: <form ...

Exploring the Client-Server Relationship 315 spills or overflows into the buffers it was not intended for, the result can be cor ...

316 Chapter 13 ■ Web Servers and Web Applications The following code illustrates what may be returned from a banner: HTTP/1.1 20 ...

Exploring the Client-Server Relationship 317 Input Validation Input validation is a mechanism used to verify information as it i ...

318 Chapter 13 ■ Web Servers and Web Applications The website has read the name from your browser via the link in the e-mail. Wh ...