In the last lecture, we saw different types of attacks on the servers in this lecture, we will discuss
Web server brain testing.
Website up open testing is used to identify, analyze and report vulnerabilities such as authentication,
weaknesses, configuration errors, protocol related vulnerabilities and many more in a Web server,
the best way to perform testing is to conduct a series of methodical and repeatable tests and to work
through all of different applications to find the vulnerabilities.
So why the open testing is important?
It helps us to detect the vulnerabilities or verify the vulnerabilities, to exploit the vulnerability
in order to test and fix the issue, remediation of vulnerabilities, to retest the solution against
vulnerability, to ensure that it is completely secure and identification of the infrastructure to identify,
make Virgin and update levels of the servers.
This helps in selecting experts to test for associated vulnerabilities.
So let's start with testing on Web servers.
Web server and testing starts with collecting as much information as possible about an organization
ranging from its physical location to operating in the moment.
Now you social engineering techniques to collect information such as human resources, contact details
and many more that may help in Web server authentication testing use.
Who is database query tools to get the details about a target such as domain name, IP, address, administrator
contacts, autonomous system, DNS, etc. fingerprint web server to gather information such as server
name, server type operating systems.
Applications running on that system using tools such as an aircraft is strictly Peacon and I reserve
GRALL website.
Get specific types of information from web pages such as email address, enumerator, web server directories,
QuickStart, important information to those with functionalities, logging forms, etc. but from directory
traversal attack, klaxons restricted directories and execute commands outside of the servers group
directly performable reality scanning to identify weaknesses in the network, using tools such as Acuña
Ticks, Nessus, etc..
We have seen Nessus in the vulnerability assessment section, but from its GDP response splitting attack
to pass malicious data to one Raible application that includes the data in an Israeli response header,
both from the cache poisoning attack to force the Web server sketchy to flush its actual cache content
and send a specially crafted request which will store in the cashier brute force as S.H., FPP and other
services login credentials to gain unauthorized access.
But from Sejin Highjacking to capture the valorisation cookies and Iris use tools disbursal Firesheep
G hijack automated station hijacking.
Next, perform an item that is the man in the middle attack to access sensitive information by intercepting
and altering communications between end user and web server use tools to destabilize the A.W. stats,
Temotu, etc. to examine the server logs and in the end use tools citizen to split three if expert frameworks
and document all the findings.
I hope you got an overview of how to perform network testing on the servers.
In the next lecture, we will see some countermeasures of lipservice.