Penetration Testing of Computer Networks Using Burpsuite and Various Penetration Testing Tools

Dr. Hidaia Mahmood Alassouli

Summary

Burp Suite is an integrated platform/graphical tool for performing security testing of web applications. Burp suite is a java application that can be used to secure or crack web applications. The suite consists of different tools, like a proxy server, a web spider an intruder and a so-called repeater, with which requests can be automated. You can use Burp's automated and manual tools to obtain detailed information about your target applications.
Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.
In this report I am using a combination of Burp tools to detect and exploit vulnerabilities in Damn Vulnerable Web App (DVWA) with low security. By default, Burp Scanner scans all requests and responses that pass through the proxy. Burp lists any issues that it identifies under Issue activity on the Dashboard. You can also use Burp Scanner to actively audit for vulnerabilities. Scanner sends additional requests and analyzes the application's traffic and behavior to identify issues.
Various examples are outlined in this report for different types of vulnerabilities such as: SQL injection, Cross Site Request Forgery (CSRF), Cross-site scripting, File upload, Local and Remote File Inclusion. I tested various types of penetration testing tools in order to exploit different types of vulnerabilities. The report consists from the following parts:
1. Installing and Configuring BurpSuite
2. BurpSuite Intruder.
3. Installing XMAPP and DVWA App in Windows System.
4. Installing PHP, MySQL, Apache2, Python and DVWA App in Kali Linux.
5. Scanning Kali-Linux and Windows Using .
6. Understanding Netcat, Reverse Shells and Bind Shells.
7. Adding Burps Certificate to Browser.
8. Setting up Target Scope in BurpSuite.
9. Scanning Using BurpSuite.
10. Scan results for SQL Injection Vulnerability with BurpSuite and Using SQLMAP to Exploit the SQL injection.
11. Scan Results for Operating System Command Injection Vulnerability with BurpSuite and Using Commix to Exploit the OS Command Injection.
12. Scan Results for Cross Side Scripting (XSS) Vulnerability with BurpSuite, Using Xserve to exploit XSS Injection and Stealing Web Login Session Cookies through the XSS Injection.
13. Exploiting File Upload Vulnerability.
14: Exploiting Cross Site Request Forgery (CSRF) Vulnerability.
15. Exploiting File Inclusion Vulnerability.
16. References.

Available since: 03/11/2023.

Print length: 160 pages.

Science & Technology

Other books that might interest you

Ways of Attending - How our...

Iain McGilchrist

Attention is not just receptive, but actively creative of the world we inhabit. How we attend makes all the difference to the world we experience. And nowadays in the West we generally attend in a rather unusual way: governed by the narrowly focussed, target-driven left hemisphere of the brain.
Forget everything you thought you knew about the difference between the hemispheres, because it will be largely wrong. It is not what each hemisphere does – they are both involved in everything – but how it does it, that matters. And the prime difference between the brain hemispheres is the manner in which they attend. For reasons of survival we need one hemisphere (in humans and many animals, the left) to pay narrow attention to detail, to grab hold of things we need, while the other, the right, keeps an eye out for everything else. The result is that one hemisphere is good at utilising the world, the other better at understanding it.
Absent, present, detached, engaged, alienated, empathic, broad or narrow, sustained or piecemeal, attention has the power to alter whatever it meets. The play of attention can both create and destroy, but it never leaves its object unchanged. How you attend to something – or don’t attend to it – matters a very great deal. This book helps you to see what it is you may have been trained by our very unusual culture not to see.
Ways of Attending is expertly read by Mike Fraser. The cover design has been adapted from a Cajal original drawing, and used with permission of Legado Cajal (Madrid).
This audiobook was produced and published by Echo Point Books & Media, an independent bookseller in Brattleboro, Vermont. © 2018 Iain McGilchrist (P)

Show book

Live Forever? - A Curious...

John Tregoning

Time wants you dead. Not just you, but your friends, family, pets – everyone you’ve ever met… 
 
With over 17,000 known diseases affecting humans, and countless poisons, carcinogens and toxins in our environment, it’s a miracle that our bodies manage to keep us alive. And that is, of course, if they don’t betray us themselves, whether through cancers or autoimmune conditions. 
 
Biomedical researcher Professor John Tregoning tells the unlikely story of how, against all odds, we manage to stay alive. Taking an organ-by-organ tour of the human body, Tregoning embarks on his own experimental quest, testing 'life-extending' diets and exercise regimes to separate fact from fad. Exploring the multitude of ways our bodies can kill us, from inherited genetic conditions, through heart attacks, arrythmias and angina, onto the delicate workings of the brain, Live Forever? offers compelling insight into how our bodies work, how we can best look after them – and ultimately live longer, healthier lives.

Show book

The Only Kayak - A Journey Into...

Kim Heacox

Winner of the 2020 National Outdoor Book Award for Outdoor Classic! 
 
 
 
In this coming-of-middle-age memoir, Kim Heacox, writing in the tradition of Abbey, McPhee, and Thoreau, discovers an Alaska reborn from beneath a massive glacier, where flowers emerge from boulders, moose swim fjords, and bears cross crevasses with Homeric resolve. In such a place Heacox finds that people are reborn too, and their lives begin anew with incredible journeys, epiphanies, and successes. All in an America free of crass commercialism and overdevelopment. 
 
 
 
Braided through the larger story are tales of gold prospectors and the cabin they built sixty years ago; John Muir and his intrepid terrier, Stickeen; and a dynamic geology professor who teaches earth science "as if every day were a geological epoch." 
 
 
 
Nearly two million people come to Alaska every summer, some on large cruise ships, some in single kayaks—all in search of the last great wilderness, the Africa of America. It is exactly the America Heacox finds in this story of paradox, love, and loss.

Show book

The Girl Who Waited For The Sun

Proiti Seal Acharya

What happens to the girl who eagerly waited for the sun but kept facing boulders of difficulties at every step? Will she give up? Will she stop looking for the big ball of light altogether? Or will she come up with a new plan!

Show book

Vedic Tricks Made Mathematics...

MAHAVIR SINGH

This audiobook is narrated by an AI Voice.   
Unveiling the Power of Vedic Mathematics 
Vedic Mathematics provides highly efficient techniques for mental calculations, enabling individuals to perform complex computations quickly.  
Vedic Mathematics are versatile and applicable across various mathematical operations, including addition, subtraction, multiplication, division, algebraic equations, and even advanced mathematical concepts. 
Vedic Tricks strongly emphasizes mental calculations, fostering the development of strong brain calculations. 
Vedic Tricks are designed to streamline calculations in competitive exams where time is a critical factor. Students find these methods beneficial for solving problems quickly and accurately in exam. 
It emphasizes mental calculation, promoting the development of mental agility and mathematical intuition.  
Vedic Tricks are not limited to specific types of problems; they can be applied universally, making them adaptable to various mathematical scenarios. Vedic Mathematics is often used as an educational tool to make learning mathematics more engaging, accessible, and enjoyable for students.

Show book

The Collision - What AI Does to Us

Eric C. So

AI is not just changing what we do. It is changing who we are as thinkers. How do we get the best out of AI without making ourselves worse? 
 
AI promises effortless solutions and endless capacity. But the collision of human intelligence and machine intelligence has also started to create two diverging groups: those who use AI to think better and those who use AI instead of thinking. What if the accessibility of a tool this fast, creative, and smart is eroding our ability to think for ourselves? 
 
Through lucid storytelling and cutting-edge research, including his own widely discussed work and examples from workers across industries who are struggling and succeeding with AI, MIT professor Eric C. So reveals the science behind the way AI is reshaping our brains―and offers practical guidance for wielding these powerful tools without letting our minds atrophy: Value the struggle of human effort. Know who you are without AI. Reinvest the cognitive surplus AI creates. Treat AI as a cognitive trainer, not a replacement. 
 
Rich with takeaways for professionals, parents, and everyone trying to understand AI's perils and promise, The Collision is an essential guide for using AI without losing yourself.

Show book