Threats to both servers and applications
What types of attacks can be launched at these technologies? Well, first, let's start with web servers.
Note
You'll see some similarities in the attacks that are used to target both web servers and web applications as one can create a vector for the other.
Web server attacks
When it comes to the servers themselves, attackers can launch attacks against web servers using any of the following methods:
- Denial of Service (DoS): By launching a DoS/DDoS assault on a web server, an attacker attempts to bring the service down or make it inaccessible to legitimate users. A DoS/DDoS assault on a web server is frequently directed at high-profile web servers, including bank servers, credit card payment gateways, and even root name servers.
- Brute-force attacks: Here, an attacker attempts to use combinations of usernames and passwords until one of them is found to be valid; these often result in a dictionary attack.
- DNS...
