Penetration Testing of Computer Networks Using BurpSuite and Various Penetration Testing Tools

Dr. Hedaya Alasooly

Maison d'édition: BookRix

Synopsis

Burp Suite is an integrated platform/graphical tool for performing security testing of web applications. Burp suite is a java application that can be used to secure or crack web applications. The suite consists of different tools, like a proxy server, a web spider an intruder and a so-called repeater, with which requests can be automated. You can use Burp's automated and manual tools to obtain detailed information about your target applications.Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment. In this report I am using a combination of Burp tools to detect and exploit vulnerabilities in Damn Vulnerable Web App (DVWA) with low security. By default, Burp Scanner scans all requests and responses that pass through the proxy. Burp lists any issues that it identifies under Issue activity on the Dashboard. You can also use Burp Scanner to actively audit for vulnerabilities. Scanner sends additional requests and analyzes the application's traffic and behavior to identify issues. Various examples are outlined in this report for different types of vulnerabilities such as: SQL injection, Cross Site Request Forgery (CSRF), Cross-site scripting, File upload, Local and Remote File Inclusion. I tested various types of penetration testing tools in order to exploit different types of vulnerabilities. The report consists from the following parts:1. Installing and Configuring BurpSuite2. BurpSuite Intruder.3. Installing XMAPP and DVWA App in Windows System.4. Installing PHP, MySQL, Apache2, Python and DVWA App in Kali Linux.5. Scanning Kali-Linux and Windows Using . 6. Understanding Netcat, Reverse Shells and Bind Shells.7. Adding Burps Certificate to Browser.8. Setting up Target Scope in BurpSuite.9. Scanning Using BurpSuite.10. Scan results for SQL Injection Vulnerability with BurpSuite and Using SQLMAP to Exploit the SQL injection.11. Scan Results for Operating System Command Injection Vulnerability with BurpSuite and Using Commix to Exploit the OS Command Injection.12. Scan Results for Cross Side Scripting (XSS) Vulnerability with BurpSuite, Using Xserve to exploit XSS Injection and Stealing Web Login Session Cookies through the XSS Injection.13. Exploiting File Upload Vulnerability.14: Exploiting Cross Site Request Forgery (CSRF) Vulnerability.15. Exploiting File Inclusion Vulnerability.16. References.

Disponible depuis: 21/12/2023.

Longueur d'impression: 66 pages.

Science et Technologie

D'autres livres qui pourraient vous intéresser

AI: Rise of the Lightspeed Learners

Charles Jennings

Powerful new autonomous machines called AIs are popping up all around us. The most important of these, says former AI industry CEO Charles Jennings, are the Lightspeed Learners--AIs with the power to learn on their own. 
Jennings' new book, "AI: Rise of the Lightspeed Learners", explores how AIs are affecting everything from trucking to dentistry, currency trading to warfare. It grapples with the existential challenges AI presents to humanity, and concludes the biggest threat is not killer robots, but dangerous dictators. “There are potentially disastrous consequences for Americans of all political persuasions if China leaps ahead of us in AI," he says. "An AI-dominant China would ultimately take the lead in high tech, financial services, military weapons, energy systems, transportation, manufacturing and more. AI is the coolest, strangest, most dangerous, most powerful technology yet. And we Americans, funders of the crucial first fifty years of AI research, are at risk of letting it slip away.” 
Jennings makes the case that development—and control—of “friendly AI” become an urgent political priority in the United States. But he does so less through political rants than by what he calls AI storytelling, and by taking the listener on a journey into the brave new world of AIs…a journey that includes original stories, music and poetry, as well as highly accessible explanations about how AI works, and why it matters. Visit www.lightspeedlearners.com to learn more.

Voir livre

A Beginners Guide To Bitcoin and...

Acquilia Adams

Even if you know nothing at all about cryptocurrencies, this book will get you started investing the right way.This book will help you in knowing more about bitcoin and cryptocurrencies and will also help you in investing, mining, and trading bitcoins.Join the thousands of smart traders and investors who have profited from this ultimate guide to Bitcoin. Di???v?r the ???r?t? t? bitcoin ?nd cryptocurrency inv??tm?nt ?? a beginner in thi? ?m?zing guide ????i?ll? made just for ??u.Here is a list of topics included in the book:?What is Bitcoin? ?What is Cryptocurrency??Advantages and Disadvantages Of Investing in Bitcoin.?How to Buy and Store Bitcoin ?and more

Voir livre

Energy-Efficient Computing -...

Sam Miley

Energy-Efficient Computing: Designing Sustainable Systems for Performance, Power Optimization, and a Greener Digital Future delivers a comprehensive, forward-looking exploration of how modern computing systems can be engineered to balance performance demands with the urgent need for sustainability. As data centers grow, AI workloads scale, and edge devices proliferate, energy-efficient design is no longer optional—it is essential for the future of digital innovation. 
This book provides a complete framework for understanding energy consumption across hardware, software, algorithms, and system design. From processor architectures and thermal management to power-aware scheduling, green cloud computing, and efficient AI model architectures, it equips readers with practical strategies to reduce power usage while maintaining—or even increasing—computational performance. 
Blending theory with real-world case studies, the book highlights the principles, technologies, and engineering practices driving sustainable computing today. It examines cutting-edge trends such as low-power microarchitectures, renewable-energy-aligned data centers, intelligent workload distribution, and emerging paradigms like near-memory computing and carbon-aware AI.

Voir livre

The Wreck of the Mentor - A True...

Eric Jay Dolin

New York Times • “The Nonfiction Everyone Will Be Talking About in 2026” 
  
An astonishing true story—one of the most gripping maritime sagas of the nineteenth century—told by our era’s “expert literary steersman” (Washington Post). 
  
From the best-selling author of Black Flags, Blue Waters comes the story of the American whaleship Mentor, wrecked in 1832 on a remote reef in the western Pacific. With supplies dwindling, the eleven surviving crewmen face not only the miseries of shipwreck in unfamiliar territory but also the profound uncertainty of contact with the Indigenous people of the Micronesian archipelago of Palau, who within days approach the deserted men brandishing axes, clubs, and spears. In this gripping saga of cultural collision, tribal wars, and dashed hopes, award-winning historian Eric Jay Dolin vividly reconstructs the Mentor’s doomed voyage, the years of perilous captivity, and the delicate negotiations and fraught naval rescue mission that followed. 
  
The Wreck of the Mentor is at once a powerful story of survival and a revealing window into the great Age of Sail—a time when maritime ambition collided with local sovereignty, and when the outcome of one voyage rippled across oceans and empires.

Voir livre

It Came to me One Day

Mike Blake

It Came to me One Day...  
A poem about a person listening in to the Moon and the Earth having a conversation. A poem, looking from another angle on the Planets biosystems demise. Will COP26 change anything ? 
 
***** Please leave your Review/feedback, Not just Rating! many thanks. ***** 
 
To see more Poems by the same Author please click the Link HERE: 
https://www.amazon.com/-/e/B00SG40RM8 
 
To contact the Author: Please add me Mike Miko on Facebook & then message me, thanks. 
https://www.facebook.com/mike.cco1 
I will then contact the Author your behalf. 
Instagram: wild_poetrys // wild.poetry.webs 
FB: https://www.facebook.com/New.Poets.Corner 
Website: www.wild-poetry.com

Voir livre

Cat Tales - A History

Jerry D. Moore

Feared, revered, respected, and beloved, cats have left an indelible paw print on the histories and civilizations of humankind. Over the last two million years, cats and people have interacted in diverse and unexpected ways, but the predecessors of today's furry friends were predators, not pets. 
 
Leading anthropologist Jerry Moore charts the cat's path from deadly enemy to improbable roommate. Moore journeys through our complicated history with these charismatic creatures. He travels along the Nile and across the Mediterranean, sailing on to South America, exploring pet cemeteries, cat mummies, and exquisite statuary across continents and centuries. 
 
This book surveys our relationships with cats from the Paleolithic period to the present day, unlocking the mysteries of these remarkable creatures. While cats are now beloved members of families around the world, our attempts to bring cats in from the cold have not always had happy endings, as Moore explores through such famous feline fanciers as Joe Exotic, Siegfried Fischbacher, and Roy Horn. From incredible archaeological finds to cave paintings, and from classical statues to contemporary social media, Cat Tales surveys ancient and modern interactions between humans and cats, wild and domestic, to ask a simple question: who domesticated who?

Voir livre