Penetration Testing of Computer Networks Using BurpSuite and Various Penetration Testing Tools

Dr. Hidaia Mahmood Alassouli

Beschreibung

Burp Suite is an integrated platform/graphical tool for performing security testing of web applications. Burp suite is a java application that can be used to secure or crack web applications. The suite consists of different tools, like a proxy server, a web spider an intruder and a so-called repeater, with which requests can be automated. You can use Burp's automated and manual tools to obtain detailed information about your target applications.

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.

In this report I am using a combination of Burp tools to detect and exploit vulnerabilities in Damn Vulnerable Web App (DVWA) with low security. By default, Burp Scanner scans all requests and responses that pass through the proxy. Burp lists any issues that it identifies under Issue activity on the Dashboard. You can also use Burp Scanner to actively audit for vulnerabilities. Scanner sends additional requests and analyzes the application's traffic and behavior to identify issues.

Various examples are outlined in this report for different types of vulnerabilities such as: SQL injection, Cross Site Request Forgery (CSRF), Cross-site scripting, File upload, Local and Remote File Inclusion. I tested various types of penetration testing tools in order to exploit different types of vulnerabilities. The report consists from the following parts:
1. Installing and Configuring BurpSuite
2. BurpSuite Intruder.
3. Installing XMAPP and DVWA App in Windows System.
4. Installing PHP, MySQL, Apache2, Python and DVWA App in Kali Linux.
5. Scanning Kali-Linux and Windows Using .
6. Understanding Netcat, Reverse Shells and Bind Shells.
7. Adding Burps Certificate to Browser.
8. Setting up Target Scope in BurpSuite.
9. Scanning Using BurpSuite.
10. Scan results for SQL Injection Vulnerability with BurpSuite and Using SQLMAP to Exploit the SQL injection.
11. Scan Results for Operating System Command Injection Vulnerability with BurpSuite and Using Commix to Exploit the OS Command Injection.
12. Scan Results for Cross Side Scripting (XSS) Vulnerability with BurpSuite, Using Xserve to exploit XSS Injection and Stealing Web Login Session Cookies through the XSS Injection.
13. Exploiting File Upload Vulnerability.
14: Exploiting Cross Site Request Forgery (CSRF) Vulnerability.
15. Exploiting File Inclusion Vulnerability.
16. References.

Verfügbar seit: 23.02.2023.

Drucklänge: 160 Seiten.

Wissenschaft & Technologie

Weitere Bücher, die Sie mögen werden

The Alchemy of the Enneagram in...

Michael Naylor

The Alchemy of the Enneagram in Transforming Addiction describes the distinct differences between the nine Enneagram types and their particular addiction struggles, protective mechanisms, relapse patterns, and key strategies for each type that will allow them to become conscious and drug-free men.  
Written for professionals in the addiction field-therapists, counselors, coaches, spiritual directors, mental health practitioners, and sponsors in 12-step programs-the book offers the author's understanding of the wisdom of the Enneagram and discusses in-the-trenches experiences that professionals will encounter when dealing with men in early recovery and beyond. 
"The Alchemy of the Enneagram in Transforming Addiction is inspiring, informative, deeply personal, and uplifting. Michael imparts the invaluable teachings of the Enneagram in a way that is personal, passionate, engages the mind, and touches the heart. I know that Michael's new book will become a staple in every addiction professional's repertoire." 
-Leah Chyten, LMSW, Diamond Heart Teacher, author of Light, Radiance, Splendor

Zum Buch

Herbal Healing - Herbal Remedies...

Fiona Smith

Herbal Healing: Herbal Remedies For Health and Wellness 
Are you ready to take control of your health naturally? Herbal Healing: Herbal Remedies For Health and Wellnessis your ultimate guide to harnessing the power of herbs, creating potent remedies, and building a home apothecary that will keep your family healthy for years to come. 
From soothing herbal teas to powerful tinctures, healing salves, and immune-boosting syrups, this must-have book is packed with proven, science-backed herbal remedies that every home should have. Whether you’re a beginner or an experienced herbalist, you’ll discover easy, step-by-step recipes to help you: 
✔ Boost immunity & fight colds, flu, and infections naturally 
✔ Soothe stress, anxiety, and improve sleep with calming herbal blends 
✔ Ease pain, inflammation, and headaches without relying on pharmaceuticals 
✔ Heal cuts, burns, and wounds with powerful, natural first-aid remedies 
✔ Improve digestion, balance hormones, and detoxify your body with herbal tonics 
✔ Forage, grow, and preserve medicinal herbs for year-round healing

Zum Buch

ARTIFICIAL INTELLIGENCE -...

Evan McCarty

In a world where technology is advancing at an astounding rate, artificial intelligence (AI), machine learning (ML), and deep learning (DL) are leading the way in bringing about previously unheard-of changes to almost every aspect of our lives. Artificial intelligence (AI) has become ingrained in modern life, from smart homes anticipating our needs to modern medical diagnostics, demonstrating its indispensable role as a partner in human progress rather than merely an aid. 
With its title, "Artificial Intelligence: Harnessing the Power of Machine Learning and Deep Learning," the e-book seeks to serve as your introduction to this fascinating and ever-evolving world, where the limits of human capabilities are continually being pushed to the limit. Whether you are an experienced practitioner looking to expand your knowledge or a curious mind exploring this field for the first time, this thorough guide aims to provide insightful information. 
We will go on an insightful journey together in the upcoming chapters as we examine the complex web of ideas, advancements, and technologies that make up the field of artificial intelligence. We will discuss the algorithms that enable machines to learn from and forecast data as we delve deeply into machine learning principles. As we continue, we will delve deeper and deeper into the fascinating field of deep learning, a subset of machine learning that is described by neural networks that can remarkably mimic the functioning of the human brain.

Zum Buch

Ultimate AP Chemistry Secrets to...

Alaric Greymantle

Ultimate AP Chemistry Secrets to Transform Your Score
⭐⭐ Simplified Guide & Explanations Included ⭐⭐
Are you aiming to advance your academic career and strengthen your foundation in chemistry by acing the AP Chemistry exam?
Do you need a comprehensive resource that covers everything necessary to excel in your AP Chemistry studies?
Look no further!
This guide is your ultimate companion for enhancing your understanding, applying your skills, and engaging with practical exercises. With this resource, you are set on the path to success.
Updated for the latest AP Chemistry exam structure.
Key features of this enriched guide:
- In-depth insights into AP Chemistry concepts
- Detailed explanations of master chemistry topics for AP success and confidence
- Effective strategies for exam preparation and tackling difficult problems
Our guide stands out through its thorough exploration, which is crucial for your exam triumph. The material is not just brushed over; it is examined in detail with accuracy.
Please note that this guide is independent and not affiliated with any official AP organization, designed solely for your academic benefit.
Crafted with a clear structure and accessible language, our AP Chemistry Guide ensures seamless transitions between topics. Say goodbye to dense jargon and embrace clear, precise, and technically sound content.
So why wait? Click the BUY NOW button, secure your guide, and embark on your journey to AP Chemistry success!
Prepare to transform your chemistry knowledge and achieve your goals!

Zum Buch

Ultimate ITIL® 4 Foundation...

Sankarsan Biswas

Turbo Charge Your IT career with ITSM KnowledgeBook Description
The book offers a detailed exploration of the ITIL framework, covering all its aspects, from the basic principles to advanced concepts. This thorough coverage is essential for a deep understanding of ITIL and its application in IT service management. The book is designed to be user-friendly, with clear language, helpful diagrams, and a layout that facilitates easy understanding and retention of information.
This book provides a structured approach to preparing for ITIL certification exams, including study tips, practice questions, and summaries, which are tailored to aid in both certification preparation and practical implementation. It includes insights and tips from seasoned ITIL practitioners, providing readers with valuable perspectives from experts in the field.
Given the evolving nature of ITIL, the book is updated with the latest practices, ensuring that readers are learning the most current practices in IT service management. The book emphasizes the practical application of ITIL, helping readers understand how to effectively implement ITIL practices in their daily work and organizational context.

Table of Contents

1. Getting Started with ITIL and ITSM
2. Navigating the ITIL4 Landscape-1
3. Navigating the ITIL4 Landscape-2
4. A Holistic Approach to IT Service Management
5. General Management Practices – I
6. General Management Practices – II
7. General Management Practices - III
8. General Management Practices – IV
9. Technical Management Practices
10. Service Management Practices - I
11. Service Management Practices - II
12. Service Management Practices- III
13. Service Management Practices - IV
14. Service Management Practices - V
15. Roadmap for ITIL Certification
16. Digital Transformations With ITIL4
17. Implementing ITIL4 in Organizations
Index

Zum Buch

A Sloth's Guide to Falling...

Deepak Bhosle

Introduction
Most of us are all too familiar with the struggle to fall asleep. If you're looking for a way to improve your nightly sleep routine, look no further than this audiobook, 'A Sloth's Guide to Falling Asleep'. This audiobook is here to provide resources and tips for getting into a deep, restful sleep every night.A Sloth's Approach to Sleep
It's no surprise that sloths are renowned for their ability to sleep - up to 20 hours a day! If you're having trouble getting restful sleep, why not take a cue from these slow-moving creatures and learn how to relax like a sloth? Our guide provides simple meditations for deep sleep and relaxation inspired by the moves of our furry friends.
Take it slow with your breathing. Sloths have an incredibly low metabolism, which means they can afford the luxury of taking their sweet time with every breath. Find peace in slowing your own breath down, focusing on its gentle rhythm as it flows in and out. Connecting with your body's natural cadence is key to helping you drift off into blissful unconsciousness.
Feel yourself start to sink into serenity as you practice mindfulness of your body's sensations.Guided Meditations
Meditation is one of the most effective ways to relax and destress before heading off to bed. In this article, we'll provide meditations specifically designed by experts in order to induce relaxation and help you drift off into a peaceful slumber. We'll also discuss how proper nutrition and exercise can impact your quality of sleep so that you can wake up feeling energized each morning.

Zum Buch