Penetration Testing of Computer Networks Using BurpSuite and Various Penetration Testing Tools

Dr. Hedaya Alasooly

Sinopse

Burp Suite is an integrated platform/graphical tool for performing security testing of web applications. Burp suite is a java application that can be used to secure or crack web applications. The suite consists of different tools, like a proxy server, a web spider an intruder and a so-called repeater, with which requests can be automated. You can use Burp's automated and manual tools to obtain detailed information about your target applications.
Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.
In this report I am using a combination of Burp tools to detect and exploit vulnerabilities in Damn Vulnerable Web App (DVWA) with low security. By default, Burp Scanner scans all requests and responses that pass through the proxy. Burp lists any issues that it identifies under Issue activity on the Dashboard. You can also use Burp Scanner to actively audit for vulnerabilities. Scanner sends additional requests and analyzes the application's traffic and behavior to identify issues.
Various examples are outlined in this report for different types of vulnerabilities such as: SQL injection, Cross Site Request Forgery (CSRF), Cross-site scripting, File upload, Local and Remote File Inclusion. I tested various types of penetration testing tools in order to exploit different types of vulnerabilities. The report consists from the following parts:
1. Installing and Configuring BurpSuite
2. BurpSuite Intruder.
3. Installing XMAPP and DVWA App in Windows System.
4. Installing PHP, MySQL, Apache2, Python and DVWA App in Kali Linux.
5. Scanning Kali-Linux and Windows Using .
6. Understanding Netcat, Reverse Shells and Bind Shells.
7. Adding Burps Certificate to Browser.
8. Setting up Target Scope in BurpSuite.
9. Scanning Using BurpSuite.
10. Scan results for SQL Injection Vulnerability with BurpSuite and Using SQLMAP to Exploit the SQL injection.
11. Scan Results for Operating System Command Injection Vulnerability with BurpSuite and Using Commix to Exploit the OS Command Injection.
12. Scan Results for Cross Side Scripting (XSS) Vulnerability with BurpSuite, Using Xserve to exploit XSS Injection and Stealing Web Login Session Cookies through the XSS Injection.
13. Exploiting File Upload Vulnerability.
14: Exploiting Cross Site Request Forgery (CSRF) Vulnerability.
15. Exploiting File Inclusion Vulnerability.
16. References.

Disponível desde: 24/02/2023.

Comprimento de impressão: 66 páginas.

Ciência e Tecnologia

Outros livros que poderiam interessá-lo

Brief History of Time A: Book...

Briefly Summaries

This is a concise summary and analysis of A Brief History of Time, by Stephen Hawking. It is not the original book and is not affiliated with or endorsed by Stephen Hawking. Ideal for those seeking a quick and insightful overview.
 
This groundbreaking book explores the mysteries of the universe, from the nature of black holes to the origins of time itself. Written in an accessible yet profound manner, it takes readers on a journey through space, time, and the laws that govern the cosmos. With clarity and wit, it delves into complex scientific concepts, making them comprehensible for general readers while posing deep philosophical questions about existence.

Ver livro

Bluesky For Dummies

Eric Butow, Rebecca Bollwitt,...

Bluesky has been taking the social media world by storm. The platform offers users a high degree of control over what information they view and share, abilities they've lost on other platforms. Bluesky For Dummies serves as your guidebook to navigating the new platform. Learn to import your contacts, control your feed, and share content, with easy-to-follow instructions. This book also shows you how to manage who can contact you and access your content, so you can avoid bots, trolls, and other unsavory characters. For business owners, this Dummies guide is a breath of fresh air—learn how to set up Bluesky for your business and enjoy a peaceful and profitable social experience. 
 
 
 
● Discover how Bluesky differs from the other social media apps out there 
 
 
 
● Create a profile, make connections, share your content, and build a following 
 
 
 
● Take control of your social media experience with access and content settings 
 
 
 
● Connect with users by exploring custom lists and feeds 
 
 
 
Refugees from other social media sites, as well as social media beginners, can find out what it's like to be social without the downsides, thanks to Bluesky For Dummies.

Ver livro

Sustainability - A Very Short...

Saleem H. Ali

The growing concern about global environmental change and human impacts on the planet has led to the emergence of a broad field of study on the 'sustainability' of human societies. The term's common usage can be traced back to the advent of the Earth Summit in 1992 when 'sustainable development' was broadly embraced by the international community as an ostensibly win-win proposition for economic development, social inclusion, and ecological conservation. Yet both the natural science underpinnings and the social implications of a quest for sustainability have been diffuse. There is a need for a coherent synthesis which draws out key themes from both natural and social analysis of the concept.This Very Short Introduction begins by introducing the concept of sustainability and how it has developed. The central chapters consider four key concepts crucial to sustainability: a) material and energy flows in consumption and production; b) technological interventions for a sustainable society; c) tipping points, and resilience in natural and social systems; and d) renewability and circularity in the economy. In the concluding chapter, Saleem H. Ali explores political means of managing anthropogenic change for a more sustainable society.

Ver livro

All Through the Night: Why Our...

Dani Robertson

Best New Books on Space 2024 – Forbes
‘Rarely is a non-fiction book about science this engaging’ – Forbes
Why darkness is so important – to plants, to animals, and to ourselves – and why we must protect it all costs.
Darkness is the first thing we know in our human existence. Safe and warm inside the bubble of the womb, we are comfortable in that embracing dark. But as soon as we are bought into the light, we learn to fear the dark. Why?
This book is a celebration of all things that go bump in the night and the joy that can be found when the sun goes down. As a society we have closed our curtains to the darkness, now Dani Robertson urges you to cast those curtains wide, step out of your front door and let the darkness pull you in.
Some 99 per cent of Western Europeans live under light polluted skies, but what is this doing to our health? Our wellbeing? Our connection to the cycles of nature?
Our wildlife, too, has been cast into the harsh glare of our light addiction, with devastating impacts.
In this book Dani shares with you the excitement and adventure she has found when everyone else is tucked up in bed. She explores constellations and cultures, enjoys environmental escapades, all whilst learning why we are addicted to light and why it is ruining our lives. She’ll show you why the darkness is so important and why we must protect it all costs. You’ll become a crusader of Darkness and an expert on what we can do to stop the onward march of light pollution (clue: it’s as easy as the flick of a switch).
Her life depends on darkness, and yours does too.
Dani Robertson's All Through The Night is a non-fiction exploration of the importance of darkness in our ecosystems. It's a journey through the wilderness of the night sky, touching on topics of astronomy, ecology, and conservation. This bestseller is a call to action for the protection of our habitats from light pollution.
For fans of John Lewis-Stempel (England), Katherine May (Enchantment), Robin Wall Kimmerer (Gathering Moss), Matt Haig (The Comfort Book), and Derek Gow (Birds, Beasts and Bedlam).
HarperCollins 2023

Ver livro

Cool - How Air Conditioning...

Salvatore Basile

"[A] history of air conditioning, chronicling the numerous gimmicks, failed attempts, con jobs, and eventual successes . . . a surprisingly interesting journey." —San Francisco Book Review 
 
 
  
The air conditioner is often hailed as one of the modern world's greatest inventions—yet nearly as often blamed for global disaster. It has changed everything from architecture to people's food habits; saved countless lives, and caused countless deaths. First appearing in 1902, when Willis Carrier, an engineer barely out of college, developed the "Apparatus for Treating Air," everyone assumed it would instantly change the world. But the story of air conditioning and its rise to ubiquity is far from simple. 
 
 
  
In Cool, Salvatore Basile tracks two fascinating stories: the struggle to perfect an effective cooling device, and the effort to convince people that they actually needed such a thing. With a cast of characters ranging from Leonardo da Vinci to Richard Nixon and Felix the Cat, Cool showcases the myriad reactions to air conditioning as it was developed and introduced to the world. Here is a unique perspective on a common convenience: how we came to rely on it today, and how it might change radically tomorrow.

Ver livro

Your AI Ally - A Beginner's...

Alberto Posse

Harness the Power of AI to Revolutionize Your Productivity
 

 
Transform your productivity with "Your AI Ally," a comprehensive guide designed for beginners eager to embrace artificial intelligence. Dive into the evolution and capabilities of AI, discovering a world of endless possibilities. Learn how AI personal assistants like ChatGPT, Notion AI, and Google Assistant can simplify and enhance your life, turning complex tasks into seamless processes.
 

 
This book provides proven strategies for integrating AI into your daily routine, offering immediate productivity boosts and time-saving solutions. Whether managing household tasks or professional projects, AI becomes an essential part of your decision-making and workflow management, helping you achieve more with less effort.
 

 
Explore practical and ethical considerations for responsible AI usage, and navigate potential challenges with ease. You'll gain confidence in troubleshooting and adapting to the AI learning curve, ensuring a smooth transition into this transformative domain.
 

 
"Your AI Ally" equips you with AI solutions tailored to various lifestyles—from creative applications for writers and artists to organized workflows for freelancers and homemakers. As you prepare for technological advancements, this guide helps you stay ahead of emerging trends.
 

 
Empower yourself to embrace AI mastery. Let this book motivate you to take actionable steps toward a future filled with productivity and success.

Ver livro