Let us continue with the Web application penetration testing.
In the previous lectures, we saw an introduction to Web server attacks and countermeasures.
And now from this lecture onwards, we will see the application vulnerabilities.
So before we move ahead, before the practical applications and using of tools, we should first know
the UPS top 10 attacks.
So in this lecture, that is the first part I will tell you, which are the first five top vulnerabilities
presented by the UPS.
So Apps stands for open web application security.
You can see these other top 10 attacks according to 2017 or APS released.
Now, why I'm not going to tell you the 2020 2019 because there is only a slight change in documentation,
but the major attacks remain same.
So in this lecture, we will cover the first five attacks.
That is even to a five.
So which is the first attack injections plus injection floors are a application vulnerabilities that
allow untrusted data to be interpreted and executed as a part of a command or query.
Now attackers can exploit injection laws by constructing malicious commands or queries that result in
data loss or corruption, lack of accountability or denial of access.
There are various types of encryption flaws like SQL injection, command line injection, a deep injection
and others.
The next data is broken authentication.
What is broken authentication and attacker uses vulnerabilities in the authentication or session management
functions such as exposed accounts, session IDs, logout password management timeouts, remember meetings,
secret questions, one time passwords, account updates and others just to impersonate other users,
attackers, the network traffic or the user to get an I.D. And he uses these session IDs for malicious
purposes.
Password exploitation is also a part of broken authentication.
What is Dinmore exploitation?
No fun applications.
Timeouts are not set properly and the user simply closes the browser without logging out from sites
accessed through a public computer.
The attacker can simply use the same browser later and exploit the user's privileges.
The third one is sensitive data exposure, as you can guess on the name.
Many Web applications do not protect sensitive data properly from unauthorized users.
Sensitive data exposure takes place you two floors like insecure cryptographic storage and information
leakage.
Now, when an application uses poorly written encryption code to securely encrypt and store sensitive
data in the database, the attacker can exploit this flaw and steal or modify weakly protected, sensitive
data such as credit card numbers, assistance and other authenticated credentials.
So basically, by exploiting this vulnerability, attackers can steal your sensitive data.
The fourth one is external external entity that is Xixi external external entity attack is a site request
forgery, that is SRF, but an application is able to parse XML input from an unreliable source because
of the misconfiguration XML parser, and that occurs in the malicious XML input containing a reference
to an external entity to the victim of application.
When this malicious input is processed by a weekly configured XML parser of the target of application,
it enables attackers to access particular files and services from servers or connected networks.
And the fifth one, this lecture is broken.
Access Control now refers to how Overapplication grant access to its contents and functions, goes unprivileged
users and others.
Broken access control is a method in which an attacker identifies of law related to access control and
then bypasses the authentication and then compromises the network.
It allows an attacker to act as a user or an administrator with privileged functions and to create access,
update or delete every record.
So for this lecture, we have seen the first five attacks of the web stop then and in the next lecture
we'll explore all of these.
That is the remaining five attacks.