Penetration Testing of Computer Networks Using BurpSuite and Various Penetration Testing Tools

Dr. Hedaya Alasooly

Sinopse

Burp Suite is an integrated platform/graphical tool for performing security testing of web applications. Burp suite is a java application that can be used to secure or crack web applications. The suite consists of different tools, like a proxy server, a web spider an intruder and a so-called repeater, with which requests can be automated. You can use Burp's automated and manual tools to obtain detailed information about your target applications.
Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.
In this report I am using a combination of Burp tools to detect and exploit vulnerabilities in Damn Vulnerable Web App (DVWA) with low security. By default, Burp Scanner scans all requests and responses that pass through the proxy. Burp lists any issues that it identifies under Issue activity on the Dashboard. You can also use Burp Scanner to actively audit for vulnerabilities. Scanner sends additional requests and analyzes the application's traffic and behavior to identify issues.
Various examples are outlined in this report for different types of vulnerabilities such as: SQL injection, Cross Site Request Forgery (CSRF), Cross-site scripting, File upload, Local and Remote File Inclusion. I tested various types of penetration testing tools in order to exploit different types of vulnerabilities. The report consists from the following parts:
1. Installing and Configuring BurpSuite
2. BurpSuite Intruder.
3. Installing XMAPP and DVWA App in Windows System.
4. Installing PHP, MySQL, Apache2, Python and DVWA App in Kali Linux.
5. Scanning Kali-Linux and Windows Using .
6. Understanding Netcat, Reverse Shells and Bind Shells.
7. Adding Burps Certificate to Browser.
8. Setting up Target Scope in BurpSuite.
9. Scanning Using BurpSuite.
10. Scan results for SQL Injection Vulnerability with BurpSuite and Using SQLMAP to Exploit the SQL injection.
11. Scan Results for Operating System Command Injection Vulnerability with BurpSuite and Using Commix to Exploit the OS Command Injection.
12. Scan Results for Cross Side Scripting (XSS) Vulnerability with BurpSuite, Using Xserve to exploit XSS Injection and Stealing Web Login Session Cookies through the XSS Injection.
13. Exploiting File Upload Vulnerability.
14: Exploiting Cross Site Request Forgery (CSRF) Vulnerability.
15. Exploiting File Inclusion Vulnerability.
16. References.

Disponível desde: 24/02/2023.

Comprimento de impressão: 66 páginas.

Ciência e Tecnologia

Outros livros que poderiam interessá-lo

Overcoming Depression and Low...

Chris Williams

Overcoming Depression and Low Mood in Older Adults joins the bestselling Routledge Overcoming series, which includes publications that have the seal of approval by the Association for Behavioral and Cognitive Therapies and highly commended by the British Medical Association. 
 
This workbook outlines how to use the Five Areas® model of Cognitive Behavioral Therapy (CBT) to equip older adults experiencing low mood or depression with key life skills to overcome these conditions. 
 
Addressing the common challenges faced by older adults during times of low mood and depression, the book provides educational life skills and resources to increase mental wellbeing in the care home, day hospital, and social support networks of this population. Chapters cover topics such as understanding and changing behaviors; behavioral activation and tackling avoidance; noticing and changing extreme and unhelpful thoughts; rebalancing relationships; building assertiveness; and problem solving. 
 
This is a valuable text for any healthcare or mental health professional working with older adults including psychological therapists, social care workers, residential home staff, psychiatrists and practice nurse and health visiting staff. The workbook is also an approachable resource for older adults themselves.

Ver livro

Loading Screens and Memory Cards...

Flandrew

Loading Screens and Memory Cards is a nostalgic journey through the golden age of gaming — from Christmas mornings spent unwrapping new consoles to late-night sleepovers lit by the glow of CRTs. 
If you remember blowing on cartridges, swapping cheat codes in the schoolyard, or fighting over who got the “good” controller, this book is for you. 
Join Flandrew, known for his YouTube channel celebrating classic games, to look back at the consoles, games, and memories that defined a generation — the PlayStation 2 era, the GameCube’s weird charm, the chaos of birthday party split-screen, and the pure joy of discovering new worlds before microtransactions and day-one patches. 
Funny, heartfelt, and packed with stories any 90s or 00s gamer will relate to, this is a love letter to the days when “please wait…” meant you had a moment to dream.

Ver livro

Cosmos Issue 98 - Beyond the Palaeo

The Royal Institution of Australia

This is Issue 98 of Cosmos, a quarterly science magazine. Produced by The Royal Institution of Australia, Cosmos aims to inspire curiosity in 'The Science of Everything' and make the world of science accessible to everyone.

Ver livro

International Space Station The:...

Editors Charles River

Much has been written about the Space Race, which is still taught across America today, but the story of human space exploration is mostly one of cooperation. Even in the summer of 1969, the Soviets had given the United States the flight plan for its Luna 15 mission, allowing Apollo 11 to avoid it.  
	That was the first of many examples of cooperation in space between the United States and the Soviet Union during the Cold War, and ultimately, their research and cooperation helped lead to the construction of the International Space Station (ISS), a large space station assembled in Earth’s orbit that represents the most ambitious international space project in history.  
	Thanks to the various components that have been put together, the International Space Station is bigger and brighter than all other artificial satellites. With relatively low power magnification, people can see the solar panels radiating outward from the numerous international modules which make up the ISS. The reality of that platform, at the edge of the ocean of space, is pretty astounding when looked at from the perspective of history. Only 120 years ago, mankind did not know if it was possible to fly in a heavier-than-air vehicle. Constructed with over 30 different modules and pieces that were carried into orbit by dozens of different launches, the ISS is already over 150 feet long, 300 feet wide and 60 feet tall. Astronauts from 10 nations have spent time on the space station as long-term crew. 
	In addition, the International Space Station can truly be held as a sign that the Space Age is maturing quite nicely, at least on a social and personal level. A total of 34 women have visited the space station, eight tourists have paid for the privilege of taking the trip to the station, and there have been many who have made multiple trips to the ISS.

Ver livro

College Level Anatomy and...

Angela Glover

Are you a healthcare student, professional, or caregiver seeking to deepen your understanding of the human body? Do you want to excel in your nursing exams, board certifications, and beyond? 
This comprehensive guide takes you on a captivating journey through the intricate systems and functions of the human body, providing you with the essential knowledge you need to succeed in your healthcare career. 
With 15 meticulously crafted chapters, this book covers:The fundamental principles of anatomy and physiologyIn-depth explorations of cell structure and function, tissues, and organ systemsDetailed insights into the integumentary, skeletal, muscular, nervous, endocrine, cardiovascular, lymphatic, respiratory, digestive, urinary, and reproductive systemsDevelopmental changes throughout the human lifespanClear, concise explanations that demystify complex anatomical and physiological concepts 
Whether you're a nursing student preparing for your licensure exam, a healthcare professional seeking to expand your expertise,"College Level Anatomy and Physiology" is the ultimate companion on your journey to mastering the intricacies of the human body. 
Don't miss this opportunity to elevate your knowledge and excel in your healthcare pursuits. Order your copy of "College Level Anatomy and Physiology" today and unlock the secrets of the incredible machine that is the human body!

Ver livro

Ultimate Selenium WebDriver for...

Robins Gupta

Elevate your test automation skills by mastering Selenium with Java, delving into advanced techniques for a comprehensive understanding.
Book Description
This comprehensive and practical handbook, centered on Selenium unlocks its potential using Java. The book covers Selenium basics, including IDE and WebDriver, while delving into advanced topics like Selenium Grid and non-functional test automation. It will help you take your automation to the next level by gaining insights into creating Hybrid test automation frameworks with practical applications of TestNG. Real-world insights from industry leaders enrich the learning experience, transcending tool proficiency to strategic test automation and framework design. With practical examples and case studies from diverse sectors, including banking, healthcare, e-commerce, and SAAS, the book showcases Selenium's real-world applications.??
By the end of the book, you will extend Selenium's capabilities for Performance, Security, and Excel-based automation. The book will help you stay ahead in the ever-evolving field with insights into the latest updates, including Selenium Manager, BiDi protocol, network interception, relative locators, and Selenium's roadmap.
Table of Contents
1. Introduction to Selenium Test Automation
2. Fundamentals of Test Automation
3. Selenium WebDriver Basics
4. Advanced Selenium Techniques
5. Test Automation Framework
6. Distributed Test Automation
7. SAAS and Non-functional Test Automation
8. BDD with Selenium
9. New Features in Selenium 4
10. Conclusion
11. Way Forward
Index

Ver livro