Flashcards for:
Cybersecurity Basics & WiFi Cracking

Disabling WPS helps prevent vulnerabilities that can be exploited by brute force and pixie dust attacks to gain unauthorized access.

The 'root' user has full system privileges and can make critical changes, while 'normal' users have limited permissions for security and stability.

A deauthentication attack sends unauthorized deauth frames to a client, disconnecting it from the network and capturing handshake files for cracking.

The 'site' operator helps narrow down search results to a particular domain, making it easier to find specific information within that domain.

CUPP (Common User Password Profiler) creates customized wordlists based on information such as names, birthdays, and interests, increasing the effectiveness of brute force attacks.

CIDR (Classless Inter-Domain Routing) allows more flexible IP address allocation and efficient use of IP address space by separating the IP address into a network and host portion.

The primary objective is to overwhelm a website or network with excessive requests, rendering it unavailable to legitimate users.

DNS servers convert domain names into IP addresses, facilitating the routing of data between clients and servers on the internet.

TCP (Transmission Control Protocol) is connection-oriented and reliable, ensuring data is delivered in order, while UDP (User Datagram Protocol) is connectionless, faster but less reliable.

Phishing attacks use fake web pages to trick users into entering their credentials, which are then captured by the attacker.

This is known as a session hijacking attack, where the attacker takes over an active session by impersonating the victim’s session credentials.

IPv4 addresses are 32-bit and support approximately 4.3 billion unique addresses, while IPv6 addresses are 128-bit and support an almost infinite number of unique addresses.

Changing the MAC address can help maintain anonymity and evade detection or restrictions placed by network administrators.

A URL consists of the protocol, domain name, path, and query. Each part helps locate and access specific resources on the internet.

Kali Linux and Parrot OS are the emphasized Linux distributions.

HaveIBeenPwned.com allows users to check if their email addresses have been involved in any data breaches, prompting them to take necessary precautions.

The primary purpose is to extract website history and data to understand the target better.

Honeypots are decoy systems set up to attract and analyze malicious attacks, helping security teams understand and mitigate threats.

Using a virtual machine provides an isolated environment that can be easily reset, ensuring safety for the host system.

Handshake files are generated when a device connects to WiFi and contain crucial data that can be used to crack the network password.