Penetration Testing of Computer Networks Using BurpSuite and Various Penetration Testing Tools

Dr. Hedaya Alasooly

Publisher: BookRix

Summary

Burp Suite is an integrated platform/graphical tool for performing security testing of web applications. Burp suite is a java application that can be used to secure or crack web applications. The suite consists of different tools, like a proxy server, a web spider an intruder and a so-called repeater, with which requests can be automated. You can use Burp's automated and manual tools to obtain detailed information about your target applications.
Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.
In this report I am using a combination of Burp tools to detect and exploit vulnerabilities in Damn Vulnerable Web App (DVWA) with low security. By default, Burp Scanner scans all requests and responses that pass through the proxy. Burp lists any issues that it identifies under Issue activity on the Dashboard. You can also use Burp Scanner to actively audit for vulnerabilities. Scanner sends additional requests and analyzes the application's traffic and behavior to identify issues.
Various examples are outlined in this report for different types of vulnerabilities such as: SQL injection, Cross Site Request Forgery (CSRF), Cross-site scripting, File upload, Local and Remote File Inclusion. I tested various types of penetration testing tools in order to exploit different types of vulnerabilities. The report consists from the following parts:
1. Installing and Configuring BurpSuite
2. BurpSuite Intruder.
3. Installing XMAPP and DVWA App in Windows System.
4. Installing PHP, MySQL, Apache2, Python and DVWA App in Kali Linux.
5. Scanning Kali-Linux and Windows Using .
6. Understanding Netcat, Reverse Shells and Bind Shells.
7. Adding Burps Certificate to Browser.
8. Setting up Target Scope in BurpSuite.
9. Scanning Using BurpSuite.
10. Scan results for SQL Injection Vulnerability with BurpSuite and Using SQLMAP to Exploit the SQL injection.
11. Scan Results for Operating System Command Injection Vulnerability with BurpSuite and Using Commix to Exploit the OS Command Injection.
12. Scan Results for Cross Side Scripting (XSS) Vulnerability with BurpSuite, Using Xserve to exploit XSS Injection and Stealing Web Login Session Cookies through the XSS Injection.
13. Exploiting File Upload Vulnerability.
14: Exploiting Cross Site Request Forgery (CSRF) Vulnerability.
15. Exploiting File Inclusion Vulnerability.
16. References.

Available since: 02/24/2023.

Print length: 66 pages.

Science & Technology

Other books that might interest you

BLOCKCHAIN FOR EVERYONE - A...

Noah Herrmann

Delve Into the World of Cryptocurrency and Blockchain With This Comprehensive Guide!
Blockchain and cryptocurrency are a part of the global phenomenon that has taken over the world. They are a modern wave of innovation that is already reshaping the industry, social and political relationships, and every other form of exchanging value.
Still, they seem so alien, and it seems like nobody knows anything about them. Mainstream media is riddled with mysteries, myths, and partial answers to many questions regarding crypto.What exactly are cryptocurrencies?How does blockchain technology works?How are they related to real-world currencies such as the US dollar or the Euro?How can they be obtained?
These are just some of the most common questions that people are asking...
This book bridges the gap between strictly technical books about the blockchain and the research-based books primarily concerned with practical applications, discussions of its expected economic effect, and future visions. It will be your guide through the unknown and complicated world of cryptocurrency and blockchain technology.
Here is what this comprehensive guide to blockchain can offer you:The outside-in perspective of the history and future of cryptocurrenciesWhat is blockchain, and how does the cryptocurrency mining worksAn in-depth explanation of blockchain's theoretical foundationsBasic knowledge of Bitcoin and EthereumHow cryptocurrency investing worksAnd much more!
If you are looking for a complete explanation of cryptocurrencies and blockchain technology that you can finally understand with ease, this book will be perfect for you. So what are you waiting for?

Show book

Hothouse Earth

Bill McGuire

"Providing a post-COP26 perspective on the climate emergency, Hothouse Earth: An Inhabitant's Guide acknowledges that it is now practically impossible to keep this side of the 1.5°C dangerous climate-change guardrail. The upshot is that we can no longer dodge the arrival of a disastrous, all-pervasive climate breakdown that will come as a hammer blow to global society and economy. Bill McGuire, Professor of Geophysical and Climate Hazards, explains the science behind the climate crisis, painting a blunt but authentic picture of the sort of world our children will grow old in, and our grandchildren grow up in, a world that we catch only glimpses of in today's blistering heatwaves, calamitous wildfires, and ruinous floods and droughts. Bleak though it is, the picture is one we must all face up to, if only to spur genuine action—even at this late stage—to stop a harrowing future from becoming a truly cataclysmic one."

Show book

Options Trading - A Complete...

Garth McCalister

If you are looking for a way to leave the working world behind once and for all then options trading is a great way to start seeing the benefits of day trading without having to have a detailed knowledge of the stock market.
This is because, unlike when you purchase a traditional stock when you purchase an option you are given the choice as to whether or not you want to purchase a specific underlying stock if it makes sense at the moment you decide to make the purchase. If you are interested in learning more, then Options Trading: A Complete Beginner’s Guide to start investing with Options Trading is the book you have been waiting for.
While there is certainly money to be made in options trading, it isn’t without its own quirks as well. To ensure you don’t end up losing your shirt, the chapters of this book will discuss everything you need to know in order to help you take full advantage of all of the benefits that options trading has to offer. First, you will learn all about the basics of options trading and what to expect from this new type of trading. Next, you will learn about the two important types of analysis that you will utilize while trading options, fundamental and technical analysis.
From there, you will find a wide variety of starter strategies perfect for those who are just getting the hand of options trading. You will then plenty of tips for success and mistakes to avoid in order to ensure you get started as effectively as possible.
So, what are you waiting for? Take control of your financial future and buy this book today!

Show book

How Technological Advances...

Matteo Bordiga, Baojun Xu

Diet is key to understanding the past, present, and future of our species. Much of human evolutionary success can be attributed to our ability to consume and preserve a wide range of foods. Technological advances changed the types of foods we eat. With this consideration, How Technological Advances Change Human Food weaves together various themes, starting with human evolution, moving on to methods of food preservation, and continuing with the evolution of cooking methods. Issues relating to sustainability are also reported, including green food processing, vertical farming, and edible insect farming. There is a close link between what we eat and the development of our gut microbiota; thus, this book covers the evolution and adaptation of microbiota. 
 
Key Features: 
Contains a common thread in how technology has changed food and diet and its implicationsFocuses on the evolution of methods for both food preservation and cookingExplains the evolution and adaptation of gut microbiota in relation to diet

Show book

Psychogeography

Merlin Coverley

Psychogeography. In recent years this term has been used to illustrate a bewildering array of ideas from ley lines and the occult, to urban walking and political radicalism. But where does it come from and what exactly does it mean? 
 
This book examines the origins of psychogeography in the Paris of the 1950s, exploring the theoretical background and its political application in the work of Guy Debord and the Situationists. Psychogeography continues to find retrospective validation in much earlier traditions, from the visionary writing of William Blake and Thomas De Quincey to the rise of the flâneur and the avant-garde experimentatin of the Surrealists. These precursors to psychogeography are discussed here alongside their modern counterparts, for today these ideas hold greater currency than ever through the popularity of writers and filmmakers such as Iain Sinclair, Will Self and Patrick Keiller. 
 
From the urban wanderer to the armchair traveller, psychogeography provides us with new ways of experiencing our environment, transforming the familiar streets of our everyday experience into something new and unexpected. Merlin Coverley conducts the reader through this process, providing an explanation of the terms involved and an analysis of the key figures and their works. 
 
'This little book does exactly what an introduction should; it examines, explains, and whets the appetite' TELEGRAPH  
 
'An excellent overview of a tradition that can be tricky to pin down and a great portal for loads of further reading' HUGH MARWOOD 
 
'This succinct book is a definite first port of call for anyone interested in this most esoteric of theories. A portmanteau of information, a pin-pointing of Psychogeography's literary impact and standing, and a stimulating read' 3:AM MAGAZINE

Show book

Generative AI for Beginners -...

John Cook

FEELING LEFT BEHIND BY AI? MASTER GENERATIVE AI IN JUST 7 DAYS—NO TECH BACKGROUND REQUIRED 
You're not alone—and this audiobook is your fast track to mastering AI in just seven days. You'll go from unsure and overwhelmed to confident, creative, and in control, using AI to spark ideas, save hours, and supercharge your productivity. 
In this clear, no-jargon guide, you'll learn how to:Have your first smooth, stress-free AI conversationPlan, organize, and automate tasks effortlesslyIgnite creativity on demand and defeat writer's blockUnderstand AI in plain English—no coding requiredBuild your first real AI-powered project in a single week 
By the end, you'll think smarter, create faster, and finally feel confident using—and explaining—AI without ever feeling left behind again. 
Stop watching the AI revolution pass you by. Start listening to this audiobook now and master the skills that will shape your future. 
Your transformation begins the moment you press play.

Show book