Penetration Testing of Computer Networks Using Burpsuite and Various Penetration Testing Tools

Dr. Hidaia Mahmood Alassouli

Maison d'édition: Dr. Hidaia Mahmood Alassouli

Synopsis

Burp Suite is an integrated platform/graphical tool for performing security testing of web applications. Burp suite is a java application that can be used to secure or crack web applications. The suite consists of different tools, like a proxy server, a web spider an intruder and a so-called repeater, with which requests can be automated. You can use Burp's automated and manual tools to obtain detailed information about your target applications.
Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.
In this report I am using a combination of Burp tools to detect and exploit vulnerabilities in Damn Vulnerable Web App (DVWA) with low security. By default, Burp Scanner scans all requests and responses that pass through the proxy. Burp lists any issues that it identifies under Issue activity on the Dashboard. You can also use Burp Scanner to actively audit for vulnerabilities. Scanner sends additional requests and analyzes the application's traffic and behavior to identify issues.
Various examples are outlined in this report for different types of vulnerabilities such as: SQL injection, Cross Site Request Forgery (CSRF), Cross-site scripting, File upload, Local and Remote File Inclusion. I tested various types of penetration testing tools in order to exploit different types of vulnerabilities. The report consists from the following parts:
1. Installing and Configuring BurpSuite
2. BurpSuite Intruder.
3. Installing XMAPP and DVWA App in Windows System.
4. Installing PHP, MySQL, Apache2, Python and DVWA App in Kali Linux.
5. Scanning Kali-Linux and Windows Using .
6. Understanding Netcat, Reverse Shells and Bind Shells.
7. Adding Burps Certificate to Browser.
8. Setting up Target Scope in BurpSuite.
9. Scanning Using BurpSuite.
10. Scan results for SQL Injection Vulnerability with BurpSuite and Using SQLMAP to Exploit the SQL injection.
11. Scan Results for Operating System Command Injection Vulnerability with BurpSuite and Using Commix to Exploit the OS Command Injection.
12. Scan Results for Cross Side Scripting (XSS) Vulnerability with BurpSuite, Using Xserve to exploit XSS Injection and Stealing Web Login Session Cookies through the XSS Injection.
13. Exploiting File Upload Vulnerability.
14: Exploiting Cross Site Request Forgery (CSRF) Vulnerability.
15. Exploiting File Inclusion Vulnerability.
16. References.

Disponible depuis: 11/03/2023.

Longueur d'impression: 160 pages.

Science et Technologie

D'autres livres qui pourraient vous intéresser

The Power of Partnership - The...

Marc Hester

The Power of Partnership: The Ultimate Guide to Joint Venture Marketing. Discover Tips on How to Get Potential Joint Venture Partners to Say Yes! 
In the world of internet marketing, a JV (or “joint venture”) occurs when two separate internet marketers get together to promote one’s product. In offline marketing, joint ventures are not taken lightly. These can take months to negotiate and a legal contract is always drawn up, with each party’s responsibilities and rights laid out in black and white. In internet marketing, however, there is usually no need for a contract unless you are actually developing a product together. 
In this audiobook, you will learn everything about joint ventures, how to find potential partners, what to look out for so you can find the best partner that would help your business. You will also learn tips on how to make potential partners agree and say yes to your proposal. 
This audiobook will cover the following topics: 
- What is a Joint Venture Partnership? 
- What’s The Big Advantage? 
- The Single Most Vital Thing You Can Do 
- Choosing Your Potential Partner 
- Where to Look 
- Finding Your First JV Partner 
- Researching Your Potential JV Partner 
- Building A Relationship 
- Making Your Offer 
- Who Handles What 
- Dealing With Rejection 
- Top 8 Mistakes 
- And many more! 
If you want to learn more, scroll up and click “add to cart” now!

Voir livre

BLOCKCHAIN BASICS BIBLE:...

Nakamoto Satoshy

Do you want to invest, but it seems so complicated? 
What if there was an easy way? 
Keep reading to discover everything you need about Blockchain and how to mine to make high profits. 
More than 1 Billion Dollars have been invested into Blockchain. Hundreds of startups and financial organizations are working on improving and scaling this technology. So what exactly is it? 
Millionaires are being made because of this new opening in the market. Do you want to stand aside and watch? Or do you want to seize the opportunity? Inside this book, you will learn :Basics of Blockchain: All the necessary fundamentalsHow Blockchain works and the way it doesApplications of Blockchain and how to useWhat makes Blockchain so specialHow to Profit from BlockchainInvesting strategies and potential risksFuture of Blockchain:Discover how mining and cryptocurrency Works 
The good thing is that Blockchain is still in the early stages. Most people think cryptocurrency mining is too complicated, and you need to be tech-savvy to be a miner; this is far from the truth. 
I'm giving away all the secrets for you to start cashing in on this tremendous opportunity!  
I'll show you how to mine, and you get to keep everything! 
Now It's your turn to take action!  
Scroll Up and Click "Buy Now" to Get Your Guide Today and start scaling Blockchain Technology today!

Voir livre

The Trees Are Speaking -...

Lynda V. Mapes

Ancient and carbon-rich, old-growth forests play an irreplaceable role in the environment. Their complex ecosystems clean the air, purify the water, cool the planet, and teem with life. In a time of climate catastrophe, old-growth and other natural forests face existential threats caused by humans―and their survival is crucial to ours.In a bicoastal journey, environmental journalist Lynda V. Mapes connects the present and future of Pacific Northwest forests to the legacy forests of the northeastern United States. Beginning in Oregon and Washington, where old growth supports, and is supported by, the region’s salmon, we meet Jerry Franklin, who led scientists in recognizing and studying the distinctiveness of these majestic spaces. From there, we journey to Vancouver Island, where Indigenous activists and scientists strive to preserve the health of Nuu-chah-nulth traditional homelands amid continued clearcutting. On the East Coast, we see the corduroy patterns of lands that have been logged for generations, leaving industrial carnage along formerly life-filled waterways.Mapes invites us to understand the world where trees are kin, not commodities. The Trees Are Speaking is a must-listen for those with a deep interest in environmental stewardship, Indigenous land rights, and the urgent challenges posed by climate change.

Voir livre

Weight Loss Surgery - New...

Lari Brunelli

Are You Considering Getting a Weight Loss Surgery Done, But Are Worried About Keeping the Weight Off Afterwards? 
Then this audiobook is for you. Inside you'll learn different weight loss options everything from surgeries to diets that will help you to get rid of the weight and keep it off for good. Too many people get expensive weight loss surgeries performed only to go back to their old lifestyles and wind up right back on square one with nothing to show for it. 
This audiobook will teach you everything you need to know about maintaining a healthy diet and living a more healthy lifestyle. Unlike other audiobooks on the market that rely on gimmicks this audiobook is made in an easy to read manner, and therefore you'll be able to start making these changes to your life right away. Filled with diet plans, recipes and workout guides, this audiobook has everything that you need to make a healthier change in your life.What's in this audiobook?Different Weight loss surgery options;Techniques to maintain your weight loss and live healthier;Keeping Good Health;Recipes and Diet Plans;Ando so much more!If you're ready to change your life and live the healthy lifestyle that you've always dreamed about then you need to get this audiobook today!

Voir livre

Affiliate Marketing

Mark J. Cooper

Are you tired of the 9-to-5 grind?  
Do you dream of working from anywhere in the world, on your own schedule? If so, affiliate marketing may be the perfect career path for you. 
With "Affiliate Marketing," you'll learn everything you need to know to get started in this lucrative industry. Here are just a few of the benefits of affiliate marketing:Passive income: Once you've set up your affiliate links, you can earn money while you sleep.Flexibility: Work from anywhere in the world, on your own schedule.Low startup costs: Affiliate marketing is one of the most affordable ways to start a business.No inventory or shipping: You don't need to worry about storing or shipping products.No customer service: The merchant handles all customer service inquiries. 
In this audiobook, you'll learn how to:Choose the right niche for your affiliate marketing businessFind the best affiliate programs to promoteCreate engaging content that drives traffic to your affiliate linksBuild an email list to maximize your earning potentialUse social media to grow your affiliate marketing businessAnd much more! 
Don't let another day go by in a job you hate. Take control of your career and start building the life you've always dreamed of with "Affiliate Marketing." 
Order now and start your journey to financial freedom today!

Voir livre

Mastering Frontend System Design...

Et Tu Code

Mastering Frontend System Design is an audio guide that provides a comprehensive overview of building scalable and efficient frontend architectures. The book covers key concepts such as UI design principles, responsive web design, frontend frameworks and libraries, state management, performance optimization, security considerations, accessibility, progressive web apps, testing strategies, scalability, build tools, and emerging trends in frontend development. 
The audiobook begins with an introduction to frontend system design, followed by detailed discussions on UI design principles, responsive web design, and frontend frameworks and libraries. The book then delves into state management, performance optimization, security considerations, and accessibility. The listener will also learn about progressive web apps, testing strategies, scalability, and frontend build tools. Finally, the audiobook concludes with a summary of key takeaways and a list of interview questions for frontend system designers. 
Throughout the audiobook, listeners will gain a deep understanding of how to design and build efficient and scalable frontends, including best practices for UI design, responsive web design, and frontend development. The book also covers important topics such as performance optimization, security considerations, and accessibility, making it an essential resource for any frontend developer or designer looking to master the field.

Voir livre