Book Image

Practical Network Scanning

By : Ajay Singh Chauhan
Book Image

Practical Network Scanning

By: Ajay Singh Chauhan

Overview of this book

Network scanning is the process of assessing a network to identify an active host network; same methods can be used by an attacker or network administrator for security assessment. This procedure plays a vital role in risk assessment programs or while preparing a security plan for your organization. Practical Network Scanning starts with the concept of network scanning and how organizations can benefit from it. Then, going forward, we delve into the different scanning steps, such as service detection, firewall detection, TCP/IP port detection, and OS detection. We also implement these concepts using a few of the most prominent tools on the market, such as Nessus and Nmap. In the concluding chapters, we prepare a complete vulnerability assessment plan for your organization. By the end of this book, you will have hands-on experience in performing network scanning using different tools and in choosing the best tools for your system.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Contributors
Preface
Index

SQL Injection


SQL Injection is one of the oldest and most widely used application layer vulnerabilities used by attackers to steal valuable data from SQL based databases. Attackers leverage an SQL Injection vulnerability to bypass a web application's authentication system and to retrieve information. SQL Injection can also be used to make changes like adding, deleting, and modifying data records. The following diagram shows a 3-Tier application architecture:

The 3-Tier application has the following components: 

  • User Interface: User Interface (UI) is basically a user friendly way to interact with an actual application. This can be a mobile application, web UI or API method to interact with applications. A UI layer requests data from a business layer.
  • Business Logic: A business logic can be considered an application layer which is responsible for handling data validation, business rules and task-specific behavior. Business rules fetch or insert data into the database layer. 
  • Database Layer: This...