Madhnw0rm.com - Information About Cyber Security Awareness: Hacking Web Applications

<div dir="ltr" style="text-align: left;" trbidi="on">
HACKING WEB APPLICATIONS 
 
Hacking web applications refers to carrying out unauthorized access of a website or the website details 
 
A web application is an application that is accessed by users over a network such as the internet or an intranet, The term may also mean a computer software application that is coded in a browser supported programming language and a common web server to render the application executable 
 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiH_m6xYOF3BRavYX4LDE7w9GVOZJ0g05BKZUaVDuAZG8hjYmgAKFFjuoTa8XnM_dbSuUekkHbGnst_Vj0C1E9WKlvInxLI_OtR9OQqZnZ1PPRM9DT8Q2GdU5p7ermd0CKUKDjfxFg_xQbe/s1600/Hacking+web+applications.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Hacking web applications refers to carrying out unauthorized access of a website or the website details" border="0" height="249" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiH_m6xYOF3BRavYX4LDE7w9GVOZJ0g05BKZUaVDuAZG8hjYmgAKFFjuoTa8XnM_dbSuUekkHbGnst_Vj0C1E9WKlvInxLI_OtR9OQqZnZ1PPRM9DT8Q2GdU5p7ermd0CKUKDjfxFg_xQbe/s320/Hacking+web+applications.JPG" title="Hacking web applications" width="320" /></a></div>
 
 
Web Applications are popular due to the ubiquity of web browsers and the using of a web browser,common web browser support cross flat form compatibility 
 
Web hacking refers to exploitation of applications via HTTP which can be done by manipulating the application via its graphical web interface,tampering the resource identifier or tampering HTTP elements not contained in the URL methods that can be used to hack web applications are SQL 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaaAN6qo-JR93Nq8399a99acLubxj20JBAVhKF2IPZPECceU5DO6YxAflWJHpNDDXtTy2AvlB9MhAqwBVcO2fyAtB_VEkNOLnFUOEnboJEiDSN3VUaDSaxw_NzRnqsscHKNT_6wqbIVufF/s1600/WEB+2.0.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Web Applications are popular due to the ubiquity of web browsers and the using of a web browser,common web browser support cross flat form compatibility" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaaAN6qo-JR93Nq8399a99acLubxj20JBAVhKF2IPZPECceU5DO6YxAflWJHpNDDXtTy2AvlB9MhAqwBVcO2fyAtB_VEkNOLnFUOEnboJEiDSN3VUaDSaxw_NzRnqsscHKNT_6wqbIVufF/s320/WEB+2.0.jpg" title="web applications" width="180" /></a></div>
 
 
Injection attacks, Cross site Scripting (XSS) ,Cross Site Request Forgeries (CSRF), insecure communications,etc. 
 
WEB  2.0 Applications 
 
web 2.0 refers to a new generation of web applications that provide an infrastructure for more dynamic user participation,social interaction and collaboration 
 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUOcXNseC3ak0yXxFFu1HhRNfimwVvC18Hz4r1uXPYN__4AUbOqRaGLh4SZq1UFUeM4Mrbo4TaBLxcDLE80clm25kWfEmfmRwkB_C5kIBll16Q-tk85tPDgae2XVyWOLruArPyGlA3Vm3x/s1600/WEB+ATTACKS.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="web 2.0 refers to a new generation of web applications that provide an infrastructure for more dynamic user participation,social interaction and collaboration" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUOcXNseC3ak0yXxFFu1HhRNfimwVvC18Hz4r1uXPYN__4AUbOqRaGLh4SZq1UFUeM4Mrbo4TaBLxcDLE80clm25kWfEmfmRwkB_C5kIBll16Q-tk85tPDgae2XVyWOLruArPyGlA3Vm3x/s320/WEB+ATTACKS.jpg" title="web 2.0 applications" width="180" /></a></div>
Vulnerability Stack 
 
Custom Web Application 
Third Party Components 
Database 
Web Server 
Operating System 
Network 
Security 
 
 
WEB Attack Vectors 
 
 
<div style="text-align: left;">
</div>
<ul style="text-align: left;">
<li>An Attack Vector is a path or means by which an attacker can gain access to computer or network resources.</li>
<li>Security controls need to be updated continuously as the attack vectors keep changing with respect to target of attack</li>
</ul>
 
 
Unvalidated Input 
 
Input validation flaws refers to a web application vulnerability where  input from a client  is not validated before processing applications and backend servers 
 
Parameter/ Form Tampering 
 
A web parameter tampering attack involves the manipulate of parameters exchanged between client and server in order to modify application data such as user credentials and permissions 
 
A parameter tampering attack exploits vulnerabilities in integrity and logic validation mechanisms that may result in XSS, SQL injection,etc. 
 
 
Injection Flaws 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxr6oPdlt23LUKTG6YhmMqYSaShxyc4Aya_Rt-jyJC2nDZXZQZibihdbg6L21uj80J36MriazT9oVSz4siFya4qyGMCLrvVBYLAdazaY2ex7Juv0ZGOi4DrYOY4q9wQAdirsU5nSXC22Ho/s1600/WEBAPPLICATIONS.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="web application vulnerabilities that allow untrusted data to be interpreted and executed as part of a command or query" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxr6oPdlt23LUKTG6YhmMqYSaShxyc4Aya_Rt-jyJC2nDZXZQZibihdbg6L21uj80J36MriazT9oVSz4siFya4qyGMCLrvVBYLAdazaY2ex7Juv0ZGOi4DrYOY4q9wQAdirsU5nSXC22Ho/s320/WEBAPPLICATIONS.jpg" title="web 2.0" width="180" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
 </div>
injection flaws are web application vulnerabilities that allow untrusted data to be interpreted and executed as part of a command or query 
 
Cross Site Scripting Attacks 
 
Cross site scripting attacks exploit vulnerabilities in dynamically generated web pages,which enable malicious attackers to inject client side script into webpages viewed by other users. 
 
 
 </div>

Hacking Web Applications

HACKING WEB APPLICATIONS Hacking web applications refers to carrying out unauthorized access of a website or the website details A web ...