Cross-Site Scripting Attacker inserts malicious code into an application, when regular users request the webpage it returns the malicious page and the attacker gains control over user data via code he injects.
Safely validating untrusted HTML input
Cookie security
Disabling scripts
A dictionary attack is a brute-force technique where attackers run through common words and phrases, such as those from a dictionary, to guess passwords. It is also known as dictionary password attack.
Most people use real words as passwords.
Trying all dictionary words and makes the attack much faster.
Hackers and spammers attempt to log in to a computer system by trying all possible passwords until the correct one is found.
Countermeasures
Lockout a user after X no of failed login attempts
Not using Dictionary words as passwords
A Fraggle attack is exactly the same as a smurf attack, except that it uses the user datagram protocol, or UDP, rather than the more common transmission control protocol, or TCP. Fraggle attacks, like smurf attacks, are starting to become outdated and are commonly stopped by most firewalls or routers.
The attacker sends UDP packets to the random ports of the victim host. The victim will check for application listening on the port and reply with the "ICMP destination unreachable" packet.
The attacker can spoof the IP address of the UDP packets so that no one can trace it back.
Countermeasures
Close all unused ports.
A smurf attack is a form of a distributed denial-of-service attack that renders computer networks inoperable
The Smurf program accomplishes this by exploiting vulnerabilities of the Internet Protocol (IP) and Internet Control Message Protocols (ICMP).
Huge numbers of ICMP requests are sent to the victim's IP address.
The source and destination IP address is spoofed. The hosts on the victim's network respond to the ICMP requests.
This creates a significant amount of traffic on the victim’s network, resulting in the consumption of bandwidth and ultimately causing the victim’s server to crash.
Countermeasures
Configure individual hosts and routers to not respond to ICMP requests or broadcasts; or
Configure routers to not forward packets directed to broadcast addresses.
