Book Image

Kali Linux Web Penetration Testing Cookbook - Second Edition

By : Gilberto Najera-Gutierrez
Book Image

Kali Linux Web Penetration Testing Cookbook - Second Edition

By: Gilberto Najera-Gutierrez

Overview of this book

Web applications are a huge point of attack for malicious hackers and a critical area for security professionals and penetration testers to lock down and secure. Kali Linux is a Linux-based penetration testing platform that provides a broad array of testing tools, many of which can be used to execute web penetration testing. Kali Linux Web Penetration Testing Cookbook gives you the skills you need to cover every stage of a penetration test – from gathering information about the system and application, to identifying vulnerabilities through manual testing. You will also cover the use of vulnerability scanners and look at basic and advanced exploitation techniques that may lead to a full system compromise. You will start by setting up a testing laboratory, exploring the latest features of tools included in Kali Linux and performing a wide range of tasks with OWASP ZAP, Burp Suite and other web proxies and security testing tools. As you make your way through the book, you will learn how to use automated scanners to find security ?aws in web applications and understand how to bypass basic security controls. In the concluding chapters, you will look at what you have learned in the context of the Open Web Application Security Project (OWASP) and the top 10 web application vulnerabilities you are most likely to encounter, equipping you with the ability to combat them effectively. By the end of this book, you will have acquired the skills you need to identify, exploit, and prevent web application vulnerabilities.

Related Content you might be interested in

Current Title:

Small book image
Kali Linux Web Penetration Testing Cookbook - Second Edition
Gilberto Najera-Gutierrez
Aug, 2018 | 404 pages
Small book image
Web Penetration Testing with Kali Linux
Gilberto NajeraGutierrez | Juned Ahmed Ansari
Feb, 2018 | 426 pages
Small book image
Hands-On Application Penetration Testing with Burp Suite
Carlos A Lozano | Riyaz Ahemed Walikar | Dhruv Shah
Feb, 2019 | 366 pages
Small book image
Burp Suite Cookbook.
Dr Sunny Wear
Sep, 2018 | 358 pages
Table of Contents (12 chapters)
Preface
Preface
Who this book is for
What this book covers
To get the most out of this book
Sections
Get in touch
Disclaimer
Free Chapter
1
Setting Up Kali Linux and the Testing Lab
Setting Up Kali Linux and the Testing Lab
Introduction
Installing VirtualBox on Windows and Linux
Creating a Kali Linux virtual machine
Updating and upgrading Kali Linux
Configuring the web browser for penetration testing
Creating a client virtual machine
Configuring virtual machines for correct communication
Getting to know web applications on a vulnerable virtual machine
2
Reconnaissance
Reconnaissance
Introduction
Passive reconnaissance
Using Recon-ng to gather information
Scanning and identifying services with Nmap
Identifying web application firewalls
Identifying HTTPS encryption parameters
Using the browser's developer tools to analyze and alter basic behavior
Obtaining and modifying cookies
Taking advantage of robots.txt
3
Using Proxies, Crawlers, and Spiders
Using Proxies, Crawlers, and Spiders
Introduction
Finding files and folders with DirBuster
Finding files and folders with ZAP
Using Burp Suite to view and alter requests
Using Burp Suite's Intruder to find files and folders
Using the ZAP proxy to view and alter requests
Using ZAP spider
Using Burp Suite to spider a website
Repeating requests with Burp Suite's repeater
Using WebScarab
Identifying relevant files and directories from crawling results
4
Testing Authentication and Session Management
Testing Authentication and Session Management
Introduction
Username enumeration
Dictionary attack on login pages with Burp Suite
Brute forcing basic authentication with Hydra
Attacking Tomcat's passwords with Metasploit
Manually identifying vulnerabilities in cookies
Attacking a session fixation vulnerability
Evaluating the quality of session identifiers with Burp Sequencer
Abusing insecure direct object references
Performing a Cross-Site Request Forgery attack
5
Cross-Site Scripting and Client-Side Attacks
Cross-Site Scripting and Client-Side Attacks
Introduction
Bypassing client-side controls using the browser
Identifying Cross-Site Scripting vulnerabilities
Obtaining session cookies through XSS
Exploiting DOM XSS
Man-in-the-Browser attack with XSS and BeEF
Extracting information from web storage
Testing WebSockets with ZAP
Using XSS and Metasploit to get a remote shell
6
Exploiting Injection Vulnerabilities
Exploiting Injection Vulnerabilities
Introduction
Looking for file inclusions
Abusing file inclusions and uploads
Manually identifying SQL injection
Step-by-step error-based SQL injections
Identifying and exploiting blind SQL injections
Finding and exploiting SQL injections with SQLMap
Exploiting an XML External Entity injection
Detecting and exploiting command injection vulnerabilities
7
Exploiting Platform Vulnerabilities
Exploiting Platform Vulnerabilities
Introduction
Exploiting Heartbleed vulnerability using Exploit-DB
Executing commands by exploiting Shellshock
Creating and capturing a reverse shell with Metasploit
Privilege escalation on Linux
Privilege escalation on Windows
Using Tomcat Manager to execute code
Cracking password hashes with John the Ripper by using a dictionary
Cracking password hashes via Brute Force using Hashcat
8
Using Automated Scanners
Using Automated Scanners
Introduction
Scanning with Nikto
Considerations when doing automated scanning
Finding vulnerabilities with Wapiti
Using OWASP ZAP to scan for vulnerabilities
Scanning with Skipfish
Finding vulnerabilities in WordPress with WPScan
Finding vulnerabilities in Joomla with JoomScan
Scanning Drupal with CMSmap
9
Bypassing Basic Security Controls
Bypassing Basic Security Controls
Introduction
Basic input validation bypass in Cross-Site Scripting attacks
Exploiting Cross-Site Scripting using obfuscated code
Bypassing file upload restrictions
Avoiding CORS restrictions in web services
Using Cross-Site Scripting to bypass CSRF protection and CORS restrictions
Exploiting HTTP parameter pollution
Exploiting vulnerabilities through HTTP headers
10
Mitigation of OWASP Top 10 Vulnerabilities
Mitigation of OWASP Top 10 Vulnerabilities
Introduction
A1 – Preventing injection attacks
A2 – Building proper authentication and session management
A3 – Protecting sensitive data
A4 – Using XML external entities securely
A5 – Securing access control
A6 – Basic security configuration guide
A7 – Preventing Cross-Site Scripting
A8 – Implementing object serialization and deserialization
A9 – Where to look for known vulnerabilities on third-party components
A10 – Logging and monitoring for web applications' security
11
Other Books You May Enjoy
Other Books You May Enjoy
Leave a review - let other readers know what you think

Scanning with Nikto

A must-have tool in every tester's arsenal is Nikto; it is perhaps the most widely used free scanner in the world. As stated on its official website (https://cirt.net/Nikto2):

"Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6700 potentially dangerous files/programs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software. Scan items and plugins are frequently updated and can be automatically updated."

In this recipe, we will use Nikto to search for vulnerabilities in a web application and analyze the results.

...
Previous Section
End of Section 3
Next Section