Take a look at the following attack on a Web Server using obstructed URL: http://www.

GAQM CEH-001 Question Answer

Take a look at the following attack on a Web Server using obstructed URL:

http://www.example.com/script.ext?template%2e%2e%2e%2e%2e%2f%2e%2f%65%74%63%2f%70%61%73%73%77%64

The request is made up of:

 %2e%2e%2f%2e%2e%2f%2e%2f% = ../../../

 %65%74%63 = etc

 %2f = /

 %70%61%73%73%77%64 = passwd

How would you protect information systems from these attacks?

Configure Web Server to deny requests involving Unicode characters.

Create rules in IDS to alert on strange Unicode requests.

Use SSL authentication on Web Servers.

Enable Active Scripts Detection at the firewall and routers.

CEH-001 PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"