SQL injection attacks can be divided into which of the following categories?
Anonymous Quiz
17%
Blind SQL injection
19%
Out-of-band SQL injection
26%
In-band SQL injection
6%
None of these answers is correct.
33%
All of these answers are correct.
👍3
Which of the following is a type of vulnerability
where the flaw is in a web application but the
attack is against an end user (client)?
where the flaw is in a web application but the
attack is against an end user (client)?
Anonymous Quiz
8%
XXE
29%
HTML injection
42%
SQL injection
22%
XSS
👏4
Javoblar:
Zaifliklar odatda CVSS bilan aniqlanadi
SQL injection attackalar
Blind SQL injection
Out-of-band SQL injection
In-band SQL injection ga bo'linadi
XSS zaiflik turi web app ni kamchiligidan userlarga qarshi ataka qilish.
@cisco_server
Zaifliklar odatda CVSS bilan aniqlanadi
SQL injection attackalar
Blind SQL injection
Out-of-band SQL injection
In-band SQL injection ga bo'linadi
XSS zaiflik turi web app ni kamchiligidan userlarga qarshi ataka qilish.
@cisco_server
👍2
Shunday qilib bugun Google "Mullani" tug'ilgan kuni ekan.
Tabriklab qo'yamiz
@Cisco_server
https://www.google.com/search?q=Google%27s+25th+birthday&oi=ddle&ct=262000521&hl=en-GB&si=ALGXSlYh1-GEPndq7qMo--O-TPixQtNN4JMroSxgItz5kq0stHpQH5BMq3ptCHBEbFyM86XmT8Ec0qoOTe2NH-jkObwlBD_C04CvnvyYyw4pYxrVoIgNUN0dbW9YzncDQrMRo40QjGi3EdrVVwLcKr9odu4k8OQv-mmkoXqL9da2qzUZ7C357aPz0BuawDp90c0Xt4fBpBTj1NGMRsTyblQ_IpfcmTFCyZ-pd9Q7Gj6lcO-C0ckf2uKyHg9boAP2UYnaNSBLviFXMXkLOCDUCwK_eX5lJZAVCO98NVkq9VzFYaLBq79eeqVU6_YtlT0jfUOr9zy_Vn1O&source=doodle-ntp&ved=0ahUKEwiqgKec-MmBAxU2KxAIHXaYDhMQPQgB&bshm=rimc/1
Tabriklab qo'yamiz
@Cisco_server
https://www.google.com/search?q=Google%27s+25th+birthday&oi=ddle&ct=262000521&hl=en-GB&si=ALGXSlYh1-GEPndq7qMo--O-TPixQtNN4JMroSxgItz5kq0stHpQH5BMq3ptCHBEbFyM86XmT8Ec0qoOTe2NH-jkObwlBD_C04CvnvyYyw4pYxrVoIgNUN0dbW9YzncDQrMRo40QjGi3EdrVVwLcKr9odu4k8OQv-mmkoXqL9da2qzUZ7C357aPz0BuawDp90c0Xt4fBpBTj1NGMRsTyblQ_IpfcmTFCyZ-pd9Q7Gj6lcO-C0ckf2uKyHg9boAP2UYnaNSBLviFXMXkLOCDUCwK_eX5lJZAVCO98NVkq9VzFYaLBq79eeqVU6_YtlT0jfUOr9zy_Vn1O&source=doodle-ntp&ved=0ahUKEwiqgKec-MmBAxU2KxAIHXaYDhMQPQgB&bshm=rimc/1
www.google.com
Google LLC is an American multinational technology company focusing on artificial intelligence, online advertising, search engine technology, cloud computing, computer software, quantum computing, e-commerce, and consumer electronics.
👍6👏3
5 daqiqa oldin telefonim jiringladi.
-alo cisconi o'rganmoqchi edim
-hosh
-cisco paket traker dasturi kerak menga
-hosh
-ustanovichniysi kerak!?
-telegramdan yozing bor.
-dud dud dud...
Odamgarchilik,insoniylik,xurmat ... digan narsalardan shunchalik uzoqlashib ketayapmiz-a?!
-alo cisconi o'rganmoqchi edim
-hosh
-cisco paket traker dasturi kerak menga
-hosh
-ustanovichniysi kerak!?
-telegramdan yozing bor.
-dud dud dud...
Odamgarchilik,insoniylik,xurmat ... digan narsalardan shunchalik uzoqlashib ketayapmiz-a?!
🔥4😢2👎1😱1
Ko'pchilik to'g'ri javob berdi lekin hech kimniki to'liq emasligi uchun navbatdagi skreenshotni tashlagim keldi.
Javobiningizni to'ldirasizmi?
@cisco_server
Javobiningizni to'ldirasizmi?
@cisco_server
This media is not supported in your browser
VIEW IN TELEGRAM
Videoga nom beraylikchi.
@cisco_server
@cisco_server
Biz tarmoqga zo'r zo'r xavfsizlikni tanimlaymiz: router, firewall, IPS, IDS ... lar bilan. odatda L3dan L7 gacha himoya qilamiz.
Lekin tarmoqda norozi hodim bo'lsa u L2dan turib yuqoridagi L3 va L7 xavfsizlikni bekorga chiqarishi mumkin.
L2 atakalar:
CDP Reconnaissance Attack
Telnet Attacks
MAC Address Table Flooding Attack
VLAN Attacks
DHCP Attacks
Bulardan birinchi ikkitasi tarmoq qurilmalariga kirishga qaratilgan.
Qolganlari esa tarmoqni ishdan chiqarishga harakat qiladi.
@cisco_server
Lekin tarmoqda norozi hodim bo'lsa u L2dan turib yuqoridagi L3 va L7 xavfsizlikni bekorga chiqarishi mumkin.
L2 atakalar:
CDP Reconnaissance Attack
Telnet Attacks
MAC Address Table Flooding Attack
VLAN Attacks
DHCP Attacks
Bulardan birinchi ikkitasi tarmoq qurilmalariga kirishga qaratilgan.
Qolganlari esa tarmoqni ishdan chiqarishga harakat qiladi.
@cisco_server
👍6🔥3👏3
CDP Reconnaissance Attack
Cisco Discovery Protocol (CDP)- cisco uchun ishlab chiqilgan L2 protokol bo'lib, cisco qurilmalarida avtomatik yoqilgan bo'ladi.
U paketlarni unencypted shaklda broadcast jo'natadi.
Demak, bizqurilmani ip addressini, IOS versiyasini,qurilma modelini va native vlanni informatsiyasini olishimiz mumkin bo'ladi.
Oldini olish uchun ishonchsiz portlardan ili qurilmadan CDP ni o'chirish kerak.
Huddi shu atakani LLDP bilan ham qilsa bo'ladi.
LLDP haqida ma'lumot bilasizmi?
@cisco_server Siz uchun eng yaxshilarini berishga harakat qilamiz.
Cisco Discovery Protocol (CDP)- cisco uchun ishlab chiqilgan L2 protokol bo'lib, cisco qurilmalarida avtomatik yoqilgan bo'ladi.
U paketlarni unencypted shaklda broadcast jo'natadi.
Demak, bizqurilmani ip addressini, IOS versiyasini,qurilma modelini va native vlanni informatsiyasini olishimiz mumkin bo'ladi.
Oldini olish uchun ishonchsiz portlardan ili qurilmadan CDP ni o'chirish kerak.
Huddi shu atakani LLDP bilan ham qilsa bo'ladi.
LLDP haqida ma'lumot bilasizmi?
@cisco_server Siz uchun eng yaxshilarini berishga harakat qilamiz.
👍1🔥1👏1
Toshkent bir varakasiga shu kanalni 2 adminisiz qoldi.
Good bye Tashkent
Good bye Uzbekistan
@cisco_server
Good bye Tashkent
Good bye Uzbekistan
@cisco_server
👏6👍1🔥1
Tarmoqni masofadan boshqarish uchn telnet ssh ishlatamiz. Telnet xavfsiz emas.
Parollarni buzish mumkin:
Brute Force Password Attack .
Doim telnetdan zapros tashab DoS ham qilis mumkin:Telnet DoS Attack.
Bu muammoni hal qilish uchun :SSH ishlatish kk)))
Parollash siyosatiga amal qilish kerak.
(simvollardan foydalansangiz fitfillion yildan keyin topadi😂)
VTY dan kirishga ACL qo'yish.
Ko'p urinish qiladigan bo'lsa "BAN" qilish.
AAA dan foydalanish
Parollarni buzish mumkin:
Brute Force Password Attack .
Doim telnetdan zapros tashab DoS ham qilis mumkin:Telnet DoS Attack.
Bu muammoni hal qilish uchun :SSH ishlatish kk)))
Parollash siyosatiga amal qilish kerak.
(simvollardan foydalansangiz fitfillion yildan keyin topadi😂)
VTY dan kirishga ACL qo'yish.
Ko'p urinish qiladigan bo'lsa "BAN" qilish.
AAA dan foydalanish
🔥4👏3👍2❤1