Networking/Security terms.
- Peering
- Subnet
- VNet / virtual network
- north south east west
-
load balancer
- standard
- internal
- DNS
- DNS Zone
- Application Security Group
- Network Security Group
IDOR Vulnerabilty
Insecure Direct Object Reference
when a website takes user input unmolested to select resources -- e.g. changing
https://example.com/profile/edit?id=5
tohttps://example.com/profile/edit?id=10
and getting somebody else's profile editor.-
- E.g.
10.0.0.0/24
means "every IP from10.0.0.0
to10.0.0.255
". - E.g.
10.0.0.0/16
means "every IP from10.0.0.0
to10.0.255.255
". - E.g.
10.0.0.0/8
means "every IP from10.0.0.0
to10.255.255.255
".
CIDR notation
CIDR: Classless Inter-Domain Routing
Notates an IP address and its network mask
- E.g.
-
DHCP
- Dynamic Host Configuration Protocol
-
NAT Gateway
NAT stands for: Network Address Translation
From oracle's documentation:
NAT is a networking technique commonly used to give an entire private network access to the internet without assigning each host a public IPv4 address. The hosts can initiate connections to the internet and receive responses, but not receive inbound connections initiated from the internet.
When a host in the private network initiates an internet-bound connection, the NAT device's public IP address becomes the source IP address for the outbound traffic. The response traffic from the internet therefore uses that public IP address as the destination IP address. The NAT device then routes the response to the host in the private network that initiated the connection.
NAT gateways are highly available and support TCP, UDP, and ICMP ping traffic.