Chapter 4. Client-side Attacks

The term client or host means an endpoint used to connect to a network, such as a computer, a tablet, or a mobile device. A client may offer information, services, and applications to other clients or obtain information from another system, such as a server. Typically, the term client refers to endpoints used by people. Having people involved opens a range of possible vulnerabilities.

Client-side attacks, as it pertains to web applications, is viewed as a method to identify who is connecting to web applications, what vulnerabilities exist on those systems, and whether those systems can be a means to gain access or information from a web application. The focus of this chapter will be identifying systems accessing web applications, evaluating systems for vulnerabilities, and exploiting those vulnerabilities, if possible. This chapter will focus heavily on compromising passwords, as they are the most common methods used to secure host systems.

This chapter will...