Penetration Testing of Computer Networks Using BurpSuite and Various Penetration Testing Tools

Dr. Hidaia Mahmood Alassouli

Summary

Burp Suite is an integrated platform/graphical tool for performing security testing of web applications. Burp suite is a java application that can be used to secure or crack web applications. The suite consists of different tools, like a proxy server, a web spider an intruder and a so-called repeater, with which requests can be automated. You can use Burp's automated and manual tools to obtain detailed information about your target applications.

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.

In this report I am using a combination of Burp tools to detect and exploit vulnerabilities in Damn Vulnerable Web App (DVWA) with low security. By default, Burp Scanner scans all requests and responses that pass through the proxy. Burp lists any issues that it identifies under Issue activity on the Dashboard. You can also use Burp Scanner to actively audit for vulnerabilities. Scanner sends additional requests and analyzes the application's traffic and behavior to identify issues.

Various examples are outlined in this report for different types of vulnerabilities such as: SQL injection, Cross Site Request Forgery (CSRF), Cross-site scripting, File upload, Local and Remote File Inclusion. I tested various types of penetration testing tools in order to exploit different types of vulnerabilities. The report consists from the following parts:
1. Installing and Configuring BurpSuite
2. BurpSuite Intruder.
3. Installing XMAPP and DVWA App in Windows System.
4. Installing PHP, MySQL, Apache2, Python and DVWA App in Kali Linux.
5. Scanning Kali-Linux and Windows Using .
6. Understanding Netcat, Reverse Shells and Bind Shells.
7. Adding Burps Certificate to Browser.
8. Setting up Target Scope in BurpSuite.
9. Scanning Using BurpSuite.
10. Scan results for SQL Injection Vulnerability with BurpSuite and Using SQLMAP to Exploit the SQL injection.
11. Scan Results for Operating System Command Injection Vulnerability with BurpSuite and Using Commix to Exploit the OS Command Injection.
12. Scan Results for Cross Side Scripting (XSS) Vulnerability with BurpSuite, Using Xserve to exploit XSS Injection and Stealing Web Login Session Cookies through the XSS Injection.
13. Exploiting File Upload Vulnerability.
14: Exploiting Cross Site Request Forgery (CSRF) Vulnerability.
15. Exploiting File Inclusion Vulnerability.
16. References.

Available since: 02/23/2023.

Print length: 160 pages.

Science & Technology

Other books that might interest you

Data-Intensive Applications -...

James Ferry

In an era dominated by big data, mastering the art of building and maintaining data-intensive applications is crucial for any technology professional. "Mastering Data-Intensive Applications: Design, Scale, and Optimization" is a comprehensive guide that delves into the architectures, technologies, and practices essential for handling massive datasets efficiently and reliably.
This book begins by defining what makes an application data-intensive and explores the key challenges such as scalability, reliability, efficiency, and maintainability. Readers will learn about various storage options—from traditional relational databases to innovative NoSQL solutions—and understand when and how to use them effectively. The discussion extends to data distribution techniques, including partitioning and replication, essential for building fault-tolerant systems that can scale.
Further chapters focus on the nuts and bolts of data-intensive operations, including indexing, search, caching, batch and stream processing, and data integration. Each topic is covered with clear explanations, practical examples, and real-world case studies to demonstrate the application of these technologies in today’s leading companies.
Security and compliance are not overlooked; the book provides a thorough overview of the necessary practices to keep data secure and applications compliant with global regulations. Additionally, readers are equipped with strategies for scalability and performance tuning, helping them to improve existing systems and build efficient new systems from the ground up.
"Mastering Data-Intensive Applications" is an invaluable resource for software engineers, system architects, data scientists, and IT managers. Whether you are looking to deepen your existing knowledge or venturing into the field of data-intensive applications for the first time, this book offers the insights and tools needed to excel in this dynamic field.

Show book

Royal Robbins - The American...

David Smart

Acclaimed writer David Smart illuminates the fascinating life of Royal Robbins—in all its soulful ambition, rivalry, and romance. Royal Robbins chronicles his early years growing up as a latchkey kid in Southern California, the push and pull between being an aspiring banker or one of the original Camp 4 dirtbags, and his later decades as a father, husband, kayaker, and the trailblazing founder of the outdoor apparel company that bears his name. This intimate, colorful tour of climbing history covering Yosemite, the Tetons, the Gunks, the Alps, the United Kingdom, and more from the 1960s onward features star characters such as Liz Robbins—Robbins's wife and a pioneering adventurer in her own right—Yvon Chouinard, John Harlin, Steve Roper, Warren Harding, Tom Frost, and Doug Tompkins. 
 
 
 
An important addition to our knowledge of the Golden Age of rock climbing in Yosemite and the development of the clean climbing ethos, Royal Robbins sheds new light on an elemental figure of outdoor culture.

Show book

Cosmic Insights: Unveil the...

Grant Eversley

Cosmic Insights: Unveil the Universe's Messages 
   
⭐⭐ Simplified Audio Guide ⭐⭐ 
Are you looking to progress in your life and solidify your understanding by unlocking the secrets embedded in the stars? 
Seeking a comprehensive guide that provides all necessary elements to understand the wisdom of the universe? 
Your search ends here! 
This guide serves as your definitive companion for deepening your understanding, applying your skills, and engaging in hands-on exercises. With this, you're geared for success. 
Updated for the latest celestial insights. 
Key features of this enriched guide: 
- Profound insights about the universe's messages 
- Detailed explanations of cosmic wisdom  
- Fruitful strategies for understanding and application 
Our guide distinguishes itself through comprehensive coverage, which is essential for your journey to understanding cosmic secrets. Concepts aren't merely skimmed; they are delved into with precision. 
Please note that this guide is not affiliated with any official celestial entity and is purely an independent resource for your benefit. 
Designed with a clear structure and easy-to-understand language, our Cosmic Insights Guide ensures smooth transitions between topics. Say goodbye to dense jargon and welcome clear, precise, and technically accurate content. 
So, why wait? Click the BUY NOW button, secure your guide, and begin your journey to uncovering the universe's messages!

Show book

In the Name of Sharks - 1st Edition

François Sarano

Twenty meters below water, the oceanographer François Sarano came face to face with a five-and-a-half-meter great white shark. Seduced by the gentle elegance of this majestic creature, Sarano experienced a profound sense of affinity with her as they swam side by side, shoulder to shoulder, eye to eye, cutting a single figure through the ocean depths. It was an experience which made him realize the depth of our ignorance of the lives of sharks, leading him to become a passionate advocate for their protection. 
 
 
 
Drawing on the latest scientific research on the biology and ethology of sharks and their exceptional characteristics, this book aims to break through the barrier of prejudice and to pay homage to their true nature. Representing a last vestige of wildness, their populations are nevertheless under threat—like so many species, they have been hunted and exploited by humans. Sarano argues for a change of mindset in which we lose ourselves in the world of the other, so that each living entity, human and non-human, can take their rightful place in the broader global ecosystem.

Show book

Emotional Brain Secrets: A...

Landon Voss

Emotional Brain Secrets: A Journey Into How Feelings Shape Us 
⭐⭐ Simplified Audio Guide ⭐⭐ 
Are you eager to understand how emotions influence every aspect of your life and enhance your personal growth? 
Searching for a comprehensive guide that encompasses all the essential elements to grasp the impact of your feelings? 
Your search ends here! 
This audiobook serves as your ultimate companion for deepening your understanding, applying insights, and engaging in reflective exercises. With this, you're geared for transformative personal development. 
Updated for the latest insights on emotional intelligence. 
Key features of this enriched guide: 
- Profound insights into how feelings shape your reality 
- Detailed explanations of the science behind emotional responses 
- Effective strategies for emotional awareness and management 
Our guide distinguishes itself through comprehensive coverage, which is essential for truly grasping the power of emotions. Concepts aren't merely skimmed; they are delved into with precision. 
Please note that this audiobook is not affiliated with any official entity and is purely an independent resource for your benefit. 
Designed with a clear structure and easy-to-understand language, our guide ensures seamless transitions between topics. Say goodbye to dense jargon and welcome clear, precise, and insightful content. 
So, why wait? Click the BUY NOW button, secure your guide, and begin your journey to emotional awareness and growth!

Show book

Creation Care Discipleship - Why...

Steven Bouma-Prediger

Although our planet faces numerous ecological crises, including climate change, many Christians continue to view their faith as primarily a "spiritual" matter that has little relationship to the world in which we live. But Steven Bouma-Prediger contends that protecting and restoring our planet is part and parcel of what it means to be a Christian. 
 
Making his case from Scripture, theology, and ethics and including insights from the global church, Bouma-Prediger explains why Christians must acknowledge their identity as earthkeepers and therefore embrace their calling to serve and protect their home planet and fellow creatures. To help readers put an "earthkeeping faith" into practice, he also suggests numerous practical steps that concerned believers can take to care for the planet. 
 
Bouma-Prediger unfolds a biblical vision of earthkeeping and challenges Christians to view care for the earth as an integral part of Christian discipleship.

Show book