Penetration Testing of Computer Networks Using Burpsuite and Various Penetration Testing Tools

Dr. Hidaia Mahmood Alassouli

Maison d'édition: Dr. Hidaia Mahmood Alassouli

Synopsis

Burp Suite is an integrated platform/graphical tool for performing security testing of web applications. Burp suite is a java application that can be used to secure or crack web applications. The suite consists of different tools, like a proxy server, a web spider an intruder and a so-called repeater, with which requests can be automated. You can use Burp's automated and manual tools to obtain detailed information about your target applications.
Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.
In this report I am using a combination of Burp tools to detect and exploit vulnerabilities in Damn Vulnerable Web App (DVWA) with low security. By default, Burp Scanner scans all requests and responses that pass through the proxy. Burp lists any issues that it identifies under Issue activity on the Dashboard. You can also use Burp Scanner to actively audit for vulnerabilities. Scanner sends additional requests and analyzes the application's traffic and behavior to identify issues.
Various examples are outlined in this report for different types of vulnerabilities such as: SQL injection, Cross Site Request Forgery (CSRF), Cross-site scripting, File upload, Local and Remote File Inclusion. I tested various types of penetration testing tools in order to exploit different types of vulnerabilities. The report consists from the following parts:
1. Installing and Configuring BurpSuite
2. BurpSuite Intruder.
3. Installing XMAPP and DVWA App in Windows System.
4. Installing PHP, MySQL, Apache2, Python and DVWA App in Kali Linux.
5. Scanning Kali-Linux and Windows Using .
6. Understanding Netcat, Reverse Shells and Bind Shells.
7. Adding Burps Certificate to Browser.
8. Setting up Target Scope in BurpSuite.
9. Scanning Using BurpSuite.
10. Scan results for SQL Injection Vulnerability with BurpSuite and Using SQLMAP to Exploit the SQL injection.
11. Scan Results for Operating System Command Injection Vulnerability with BurpSuite and Using Commix to Exploit the OS Command Injection.
12. Scan Results for Cross Side Scripting (XSS) Vulnerability with BurpSuite, Using Xserve to exploit XSS Injection and Stealing Web Login Session Cookies through the XSS Injection.
13. Exploiting File Upload Vulnerability.
14: Exploiting Cross Site Request Forgery (CSRF) Vulnerability.
15. Exploiting File Inclusion Vulnerability.
16. References.

Disponible depuis: 11/03/2023.

Longueur d'impression: 160 pages.

Science et Technologie

D'autres livres qui pourraient vous intéresser

Essay: A Beauty Worth Admiring...

Joshua Dixon

What does self-care look like when struggling to make ends meet, living with a disability, or navigating intersectional marginalization? How can you prioritize well-being while divesting from systems built to destroy you? The answer: Hood Wellness, a groundbreaking exploration that challenges the oppressive systems deeply rooted in health and wellness industries in the United States.
In a world where self-care is critical to survival, Gordon offers a revolutionary perspective that celebrates individuals' unique privileges, challenges, and desires. By defying the norms of multi-billion-dollar industries, Hood Wellness illuminates the possibilities...
Joshua Dixon's essay, "A Beauty Worth Admiring," is a deeply personal narrative recounting his journey of survival, resilience, and self-discovery following a traumatic pit bull attack that left him with severe injuries at the age of eight. He describes the intense physical and emotional pain he endured during his recovery, including multiple surgeries and the challenges of navigating a world that often treated him with cruelty due to his appearance.
Despite these hardships, Joshua finds solace and strength in his family, especially his mother, who supported him unwaveringly. He shares how his passion for art and photography became a therapeutic outlet, allowing him to express the pain he couldn’t articulate with words and ultimately helping him reclaim his identity and confidence.
Joshua also reflects on the racism and ableism he encountered throughout his life, particularly during his time in school. He describes how these experiences, along with the ongoing struggle with body dysmorphia and mental health challenges, have shaped his commitment to promoting wellness and kindness through his platform, Admire Wear. The essay highlights his growth from a victim to a survivor who uses his story and art to inspire and uplift others.

Voir livre

Your brain on psychedelics - How...

Genis Ona

To understand the pharmacology of psychedelics is to understand the essence of what makes us human. Genís Oña makes an informative, entertaining and understandable approach to the science of psychedelics.
José Carlos Bouso, PhD, Scientific Director, ICEERS.
 

Discover the pharmacology of psychedelics.
Delve into the cutting edge of scientific research on the impact of psilocybin, MDMA, DMT, mescaline and LSD on the brain.
With this guide you will learn the keys to the effects of psychedelics, capable of producing significant changes in the processes of perception, thought and consciousness. An illustrated guide to understanding the science behind new psychedelic-assisted therapies for treating mental health issues.
This essential guide will be of interest to all psychonauts eager to immerse themselves in the pharmacology of the most popular psychedelic molecules, to all medical and mental health professionals, and to all people interested in learning the essentials of the neuroscience of psychedelic molecules and how they affect our brains.

Voir livre

Quantum Prosperity : Accessing...

Ecnal Ver

The Quantum Path to Abundance
What if wealth is not only about hard work or luck, but about how you think and focus your energy? Quantum Prosperity reveals how the principles of quantum physics can be applied to money, success, and abundance. It shows that prosperity begins with your thoughts, beliefs, and intentions.
From Scarcity to Abundance
Many people live with a scarcity mindset, believing there is never enough. This audiobook guides you to shift from fear and limitation to trust and gratitude. By changing how you see money, you begin to attract opportunities, connections, and prosperity.
The Observer Effect on Wealth
Quantum physics teaches us that observation changes reality. In your financial life, this means what you focus on becomes real. When you give attention to abundance, you collapse those possibilities into your life.
Entanglement and Connection
Your wealth is not created alone. It is connected to relationships, networks, and opportunities. Quantum Prosperity explains how positive connections and generous actions create ripples that draw more abundance back to you.
Aligning with the Frequency of Money
Everything is energy, including wealth. By tuning your emotions and thoughts to gratitude, joy, and confidence, you align yourself with the frequency of prosperity. Simple practices like affirmations, visualization, and mindful giving help you stay connected to abundance.
Creating Your Prosperous Future
This audiobook offers practical exercises and affirmations that empower you to set clear intentions, release limiting beliefs, and trust the flow of prosperity. It is not just about gaining money, but about creating a full life of joy, purpose, and connection.
An Invitation to Prosperity
Quantum Prosperity invites you to explore the science of possibilities and apply it to your financial reality. Abundance is not far away. It is already within your reach, waiting for you to claim it.

Voir livre

Innovation landscape for smart...

International Renewable Energy...

This report is organised into three sections, each following the same structure:

• Status and pace of progress of electrification of end-use sector 
This section provides a quick overview of where the sector is today in the electrification process, which path could lead to decarbonisation goals, and the importance of a smart electrification approach. It also summarises the main challenges and identifies the blind spots that are often overlooked and hinder the deployment of smart electrification strategies. 

• Toolbox for smart electrification strategy
This section includes the guidelines for implementation. Using the innovation toolbox, it illustrates how smart electrification strategies can be developed for different context specificities and needs. 

• Innovation landscape for smart electrification of end-use sector
This section lists and describes the key innovations for each dimension and explains why it is important. It also includes examples of how the innovation has been implemented.

Voir livre

Metaverse for Beginners - Guide...

Eisuke Nakamoto, Academy...

What exactly is the Metaverse?And how can we make money with it?If you want to know more, then keep reading…If you’ve not heard, Metaverse is the future! It’s planned to be the next big thing in Crypto, and in fact many leaders claim it's going to be the next stage of the Internet and possibly even bigger than the internet itself.You don’t believe that?Well, Facebook (one of the biggest companies in the world) have so much trust in it that they’ve changed their business name to “Meta”! to reflect the investment being made in the Metaverse.“Facebook is spending Billions of dollars a year already on the metaverse” (The Guardian 28 Oct 2021).WOW! That’s conviction!Plus, Bloomberg recently projected the market size of the metaverse to reach $800 billion in 2024!So the big question is…How can you get ahead and monetize the Metaverse?This book gives you the answers.In this Metaverse book, you will discover:A Full understanding of the MetaverseVirtual Reality in the MetaverseHow Augmented Reality works in the MetaverseThe investment of NFT’s in the MetaverseAvoid Risks and Challenges in the MetaverseThe Future of the MetaverseTOP METAVERSE INVESTMENTS TO SKYROCKET!Plus much more we can't list here!If you are looking for:Information on Crypto Currency InvestingA Better Understanding of DeFi and the Future of FinanceNFT Books for BeginnersBooks on the Metaverse for BeginnersThen this is just the book you’re looking for.THIS IS THE MOST COMPREHENSIVE AND UP TO DATE BOOK ON THE METAVERSEFind out which companies will provide a money-printing bonanza!

Voir livre

SQL Simplified - An Introductory...

Ava Wilson

Anyone wishing to get a firm foundation in SQL (Structured Query Language) and database management may consult "SQL Simplified: An Introductory Guide to Database Management." Designed with novices in mind, this book simplifies the complicated concepts of SQL into manageable chunks. It is a great place for professionals, hobbyists, and students to start learning about the dynamics of data interaction.
The first section of the book introduces the basic ideas of databases and provides a concise description of the structure, storage, and retrieval of data. Following this introduction to the fundamentals, readers are gradually taken through the data definition, data manipulation, and data control that make up SQL. Step-by-step explanations are provided for every topic, bolstered by real-world examples and exercises that help students learn by doing.
"SQL Simplified" stands out due to its emphasis on practical uses. In addition to learning how to write SQL queries, readers will also learn how to apply best practices for database design and maintenance, optimize database performance, and handle typical data challenges. To guarantee a thorough grasp of SQL, the book also covers more complex subjects like joining tables, subqueries, and transaction management.
"SQL Simplified" is a useful resource for teaching as well as a reference because of its concise explanations, hands-on methodology, and focus on best practices. Whether you want to learn more about databases to quench your curiosity or advance your profession, this book will teach you the confidence and knowledge you need to handle and modify data with SQL more efficiently.

Voir livre