defacing

Question

what is site defacing? and what is bugs in a web that can security of site become dangerous?

krishna prasad · Answer

A website defacement is an attack on a website that changes the visual appearance of the site. These are typically the work of system crackers who break into a webserver and replace the hosted website with one of their own. A message is often left on the webpage stating his or her seudonym and the output from uname -a and the id command along with shout outs to his or her friends. Sometimes the defacer makes fun of the system administrator for failing to maintain server security. Most times the defacement is harmless however it can sometimes be used as a distraction to cover up more sinister actions such as uploading malware.

naura pax · Answer

Defacing: hacking into a site posting your own comment on it (usually negative) crashing web servers etc... Bugs that cause security loopholes: one example is using dynamic query for sql that can lead to sql injection attack like in a poorly coded login page (with dynamic sql query or not using parameterized query) a person may write anything in username and text like 'dffd or 1=1' in password and easily enter the page. Other things like not using encryption etc can also be counted in loopholes.