Now it's time to learn about website hacking, our Web application penetration testing.
But first of all, you must know that what is a website, because if you don't know what a website is,
then how can you able to perform attacks on any website?
Right.
Then we will learn what is a Web server, for example.
A budget is a very popular Web server around the world because more than 60 percent of the websites
are running on a party server and Apache Web server runs on Linux right now.
If you don't know about Apache Web server, then you must go with a second last section of this course,
which is Linux for beginners, and go to the last lecture of that section, which consist of what is
a you upset about and how you can configure it.
Right.
Then we will perform footprinting of websites.
It is very important to perform collection of information of our target before launching attacks.
As you know, if you are performing system hacking or you are performing networking or you are performing
website hacking, collection of information is the very first step you must follow right then.
We will perform two of two or three of the major attacks like Eskil and Excess or CROSSEYED scripting
and denial of service attack or distributed denial of service attack on both virtual and life websites.
Now, it is very important to perform all of these attacks first in the virtual environment, because
you are just developing your skills of website hacking.
Using virtual environment, you won't lose any of your data, right, and you will also gain some of
the important skills.
So if you learn any new tool or techniques from the Internet, it is best to perform it first in the
virtual environment.
And once you become comfortable, then only you will go for the Web site hacking.
Right.
And remember, you only perform live upset hacking by taking all the required permissions from the owner
of the website.
OK, so in my case, I am going to use a virtual environment that I have installed three different systems.
The first virtual machine is running on Windows 10.
The second is running on Galili next.
And the third one is Mehta's Floatable, which will act as a Web server.
And it has enabled some of the demo websites to perform these attacks.
Right now, it is not necessary to create a new virtual and moment, you can use your previously configured
virtual machines as we have created at the time of system hacking.