Let us continue with the Web application protesting in this lecture, we are going to see different
and important types of attacks on Web servers.
So why are the Web servers compromised?
Web servers are compromised due to improper file and direct permissions, installing the server for
default settings, unnecessary servers enabled, including content management and remote administration
security, conflicts with business, ease of use cases, lack of proper security policy procedures and
maintenance, improper authentication with external systems, default accounts for default passwords
or no passwords, unnecessary default backup or sample files.
Misconfiguration in Web servers, operating systems and networks.
Bugs and server software.
Operating system and web applications.
Configured SSL certificates also expired SSL certificates and misconfiguration and encryption settings.
Administrative or debugging functions that have enabled or accessible on web servers.
Use of cellphones are difficult and default certificates.
So what is the impact of Web server attacks?
It results in the compromise of user account Web site defacement, secondary attacks from the website
route, access to other applications or servers, data tampering and data theft.
Now we will see some important attacks.
I'm not going into details of these attacks, but I will give you an overview of what these attacks
are.
The first is denial of service attacks, attack ads and numerous fake requests to the Web server, which
results in the Web server crashing or becoming unavailable to the legitimate users, attackers then
target high profile Web servers such as banks, credit card payment gateways, government owned services
to steal user credentials.
We will see how Bulgaria could lead a spectacle and further lectures the next.
Is server hijacking in server hijacking, attacker compromises DNS server and changes their DNS settings
so that all the requests coming towards the target of Observer are directed towards his or her own malicious
servers.
The next is the director who travels of attacks in Telcel attacks.
Attackers use dot, dot slash sequence to access restricted directories outside the web server that
is route directly.
Attackers can use trial and error method to navigate outside of the room directly and access sensitive
information in the system.
The next is the man in the middle of sniffing attack man in the middle.
Also koala's my team attack allows an attacker to access sensitive information by intercepting and altering
communications between an end user and the web server.
Attacker acts as a proxy.
So that's all the communication between the user and the web server passes to him and he can read all
the data you the to the.
The next is Web site.
Defacement attack.
Web defacement occurs when an intruder maliciously alters the visual appearance of the page by inserting
or substituting provocative and frequently offending data.
Defaced pages expose visitors to some propaganda or misleading information until the unaddressed changes
are discovered and corrected.
Attackers use a variety of methods as my ESKIL injection Web site in order to defeat it.
The next is the Web server misconfiguration server.
Misconfiguration refers to configuration of weaknesses in the Web infrastructure that can be exploited
to launch various attacks on Web servers, such as directly traversal server intrusion and data theft.
Some of the Web server misconfiguration are Worboys debug or error messages, anonymous or default users
and passwords, sample configuration and script files, remote administration functions, unnecessary
services, annable and mis configured or default SSL certificates.
In the next lecture, we will see a web server brain testing.
That is how to carry out Pentax on a web server.