liveBook · Manning

Stolen credential

As explained in Grokking Web Application Security

A stolen credential is an account identifier or authentication secret obtained without the account holder’s authorization.

A stolen credential is an account identifier or authentication secret obtained without the account holder’s authorization. Attackers value stolen usernames and passwords because they can sell them, reuse them, or test them across many services. section 1.2

Common ways credentials are obtained or abused include:

  • Keylogging scripts capture usernames and passwords as users log in. section 1.2
  • Database breaches can expose usernames, passwords, access tokens, and other sensitive records in bulk. section 1.2
  • Password spraying tests harvested credentials across many websites, while credential stuffing retries stolen passwords against one targeted site. section 1.2

A familiar warning sign

A social-media account promoting an implausible deal may have been taken over with stolen credentials and resold to scammers. section 1.2

How Grokking Web Application Security covers it

How deep it goes
Traces credential capture, bulk database theft, reuse attacks, and expanded compromise through database write access.
Examples
Uses keylogging scripts, breached databases, reused passwords, and compromised social-media accounts promoting scams.
What you can do after
Evaluate how attackers obtain credentials and extend their reach through reuse, database access, and compromised accounts.
How it connects
Connects stolen credentials with keylogging, data breaches, password spraying, credential stuffing, access tokens, and privilege escalation.
Cover of Grokking Web Application Security
liveBookmanning.com
Read Grokking Web Application Security on liveBook Get the book at manning.com

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Grokking Web Application Security. The section links point to the parts of the book it draws on.