We had only a vague description of the attacker.
我们只有那个袭击者的粗略描述。
The police have so far failed to track down the attacker.
警方至今未能追捕到攻击者。
Her loud scream scared the attacker and people came to help.
她的尖叫声把袭击者吓了一跳，人们赶来帮忙。
She gave an exact description of the attacker.
她对袭击者的特征作了精确的描述。
They think the attacker was very tall—so that lets you out.
他们认为歹徒是个高个子，这样就没你什么事儿了。
Again, the attacker requires very few resources.
同样，攻击者只需要很少的资源。
It allows the attacker to impersonate the victim.
这将允许黑客冒充受害者。
As the name suggests, the attacker opens the connection only halfway.
顾名思义，攻击者只是部分地打开连接。
Think of the problem from two perspectives: the server, and the attacker.
请从两方面来考虑这个问题：服务器和攻击者。
As a result, the attacker gets the cookies and impersonates the victim.
因此，黑客获得cookies并冒充受害者。
If the attacker has the application display a set of HTML, trouble may creep in.
如果攻击者通过应用程序显示一组HTML，这有可能就会带来麻烦。
Reports said the attacker, a local caretaker and receptionist, was not armed.
报道称袭击者是当地一名管理员和接待员，没有携带武器。
When the attacker tried to drive the bus away, the driver disabled the vehicle.
当袭击者企图开车逃跑时，司机让大巴无法启动。
That means the attacker can set up the entire attack in essentially one operation!
这意味着攻击者本质上能够在一个操作中完成整个攻击！
That will let the attacker control internal data and possibly take over the program.
这样可以让攻击者控制内部数据，甚至控制整个程序。
However, the attacker may also take over the account by changing the E-mail address.
然而，攻击者也可以通过修改email地址来接管帐户。
The first scenario looks at a situation in which a disgruntled employee is the attacker.
第一种方案研究的是攻击者是心怀不满的雇员的情况。
But that attack was rare in another way: It was easy enough to identify the attacker.
但是，这次袭击从另一方面来看却是极为少见的：袭击者很轻易地就被发现。
Hopefully, a victim will report the card as missing before the attacker gets that far.
希望受害者能在攻击者得手之前报告信用卡丢失。
This attack USES password cracking to penetrate the systems that the attacker wants to deface.
这一攻击使用密码破解来渗透攻击者想破坏的系统。
XHR: Browser cross-domain rules prevent the attacker from making the request in the first place.
XHR：浏览器跨域规则一开始就阻止了攻击者发出请求
A vulnerability is a weakness in the system, but it is not necessarily known by the attacker.
弱点是系统的缺点，但是攻击者可能不知道。
In this case, nothing terrible happens, and the attacker simply sees an error message in the client.
在这个示例中，没有发生什么可怕的事情，攻击者只是在客户机上看到了一条错误消息。
Unlike those, the XSS attack involves three parties: the attacker, the client, and the Web site.
与那些攻击不同的是，XSS攻击同时涉及三个群体：黑客、客户端和Web站点。
If a user's Kerberos password is stolen by an attacker, then the attacker can impersonate that user.
如果一个用户的Kerberos密码被攻击者窃取，攻击者就能够模拟该用户。
In another type of attack, the attacker might modify the stylesheet to hide information from users.
在另一种攻击类型中，攻击者可能会修改样式表，把信息隐藏起来不让用户发现。
But once an attacker can run code on such a machine, the attacker instantly attains complete control.
但是，一旦攻击者可以在这样的机器上运行代码，就可以立即获取完全控制。
If the exploit is run while the program is running as root, then the attacker will get a root shell.
如果程序以root权限执行时执行了利用指令码，则攻击者将得到rootshell。
Determining the identity of the attacker was a matter of narrowing down the line of potential suspects.
确定攻击者的身份需要逐渐缩小一连串嫌疑人的范围。
应用推荐