diff --git a/ftp b/ftp new file mode 100644 index 0000000..1bd2ece --- /dev/null +++ b/ftp @@ -0,0 +1,20 @@ +#ftp client commands +binary - set binary transfer type +cd - change remote working directory +lcd - change local working directory +get - recieve file +mget - get multiple files +passive - enter passive transfer mode +ls - list contents of remote directory + +#Traditional ports, though they can be dynmically assigned +Port 21 - control commands +Port 20 - data transfer + +#Active mode +Client initiates control session on port 21 and leaves port 20 open for the server to send data, and the server initiates the connection for port 20. +***If client is behind a firewall, or NAT, then the sever might not be able to connect to send data. + +#Passive mode +Server gives teh client a port to initiate a connection to for data transfer. +***Most commonly used by browsers, ect. diff --git a/web-servers-vulnerability.txt b/web-servers-vulnerability.txt new file mode 100644 index 0000000..3e13e23 --- /dev/null +++ b/web-servers-vulnerability.txt @@ -0,0 +1,14 @@ +#Sample Files +Since web servers are hard to make from the ground up, sample files are often in the distributions, and the knowledge of these sample files can provide openings. + +#Source Code Disclosure +Allowing the source code to be viewed can make holes an files accessible if they can can be found referenced in the code. + +#Canonicalization +Errors usually occur when the web server fails to fully carry out the law (that the root word for any URL/filename would be the same if it is for the same resource), and thus the web server will fail to recognize that a URL is associated with a file it addresses. + +#Input Validation +Classic hacking technique, but it can lead to buffer overflows, integer errors, and heap exploits. + +#Denial of Service +Attempting to waste server time to get a denial. For example, one can identify many strings that hash to the same location in an environment with a naive programming language hash table implementation. \ No newline at end of file diff --git a/wireless-encryptions b/wireless-encryptions new file mode 100644 index 0000000..8820c32 --- /dev/null +++ b/wireless-encryptions @@ -0,0 +1,17 @@ +#Wired Equivalent Privacy (WEP) +RC4 stream cipher w/ CRC32 for integrity check +-->Crack: +by sniffing an ARP packet, then replaying it to get many encrypted replies with different IVs +-->Avoidance: +Use WPA2 + +#Wifi Protected Access (WPA) +Temporal Key Integrity Protocol (TKIP) Message Integrity Check +-->Crack: +Uses a four way handshake, and if that handshake can be captured, then a dictionary attack ban be mounted to find the Pairwise Master Key for the Access Point and client Station +-->Avoidance: +Use long-keys + +#WPA2 +Advanced Encryption Standard (AES) +-->crack and avoidance the same was WPA \ No newline at end of file