Securing Software¶

OWASP: Open Worldwide Application Security Project
- has documentation all kinds of attacks
CVE: Common Vulnerabilities and Exposures
CVSS: Common Vulnerability Scoring System
EPSS: Exploit Prediction Scoring System
KEV: Known Exploited Vulnerabilities Catalog

Attacks¶

	Type of Attack	Attack		What could go wrong	Solution
Web	Phishing		`<a href="https://g00gle.com">https://google.com</a>`	Fake website	1. Always hover and verify destination before clicking links 2. Check if website has `https` (minimum requirement; not sufficient for safety)
	JS Injection	XSS: Cross-Site Scripting	Trick website to execute malicious code via js/css		Character escape HTTP Header
		Reflected attack	Phishing + XSS `<a href="https://g00gle.com/search?q=script_here">https://google.com</a>`	Cookie Hijacking	Character escape HTTP Header
		Stored Attack	Email		Character escape HTTP Header
	SQL Injection			Extract details/credentials of other users	Prepared statements
	Command injection		Command-line `os.system()`, `eval()`	Access file system
	Developer Tools Tweaks			Bypass client-side validation	Always do server-side validation
	CSRF Cross-Site Request Forgery	GET	Using GET request for changing state Eg: Buying amazon item	Request can be made via other websites using `<img src>`	GET Request should never be used for changing state
		POST	Even POST form has issues	Javascript can be used to automatically submit form across websites, when user visits a website with an embedded form `document.forms[0].submit()`	Use POST with a random CSRF token for a particular user
Native	Code Execution R/ACE Remote/Arbitrary Code Execution	Buffer Overflow			Digital Signatures Package managers
	Cracking
	Reverse Engineering

Always preprocess inputs from user; do not trust any input

At least escape these

Instruct browsers to only allow execution of styles/scripts - in files (not inline css/js) - from the specified domain

Content-Security-Policy: script-src https://example.com
Content-Security-Policy: style-src https://example.com

Let programming language/DB engine handle escaping

query = f"""
select *
from users
where username = ? AND password = ?;
"""

Last Updated: 2024-12-26 ; Contributors: AhmedThahir, web-flow