Madhnw0rm.com - Information About Cyber Security Awareness: Hacking Webservers

<div dir="ltr" style="text-align: left;" trbidi="on">
<b><span style="font-family: Trebuchet MS, sans-serif; font-size: x-large;">Hacking Web Servers</span></b><br />
<b><span style="font-family: Trebuchet MS, sans-serif; font-size: large;"><br /></span></b>
<span style="font-family: Trebuchet MS, sans-serif; font-size: large;">A web server, which can be referred to as the hardware,the computer or the software is the computer application that helps to deliver content that can be accessed through the internet</span><br />
<span style="font-family: Trebuchet MS, sans-serif; font-size: large;"><br /></span>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqqZLylQiGNJx27kyOfoUqw68YjHePBGFUv_0W7e_uRdmruB3H96yKBeqO4evi8UM5FANi7arE3z-x_KyIAXnKZbNe8jYPVZfKuIXxU1kokSSRhAV_RJB2IwkS5AQvAWNH3sPDldz_bXhI/s1600/hackingwebserver.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Hacking Webservers" border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqqZLylQiGNJx27kyOfoUqw68YjHePBGFUv_0W7e_uRdmruB3H96yKBeqO4evi8UM5FANi7arE3z-x_KyIAXnKZbNe8jYPVZfKuIXxU1kokSSRhAV_RJB2IwkS5AQvAWNH3sPDldz_bXhI/s400/hackingwebserver.JPG" title="Hacking Webservers" width="400" /></a></div>
<span style="font-family: Trebuchet MS, sans-serif; font-size: large;"><br /></span>
<span style="font-family: Trebuchet MS, sans-serif; font-size: large;">Most of online services are implemented as web applications, online banking,web search engines,email application and social networks are just a few examples of such web service. Web content is generated in real time by a software application running at server side, so hackers attack on the web server to steal credential information,passwords and business information by DOS attacks,SYN floods,ping floods,port scan,sniffing attacks,and social engineering attacks.</span><br />
<span style="font-family: Trebuchet MS, sans-serif; font-size: large;"><br /></span>
<span style="font-family: Trebuchet MS, sans-serif; font-size: large;">Systems are constantly being attacked and IT security professionals need to be aware of common attacks on the web server applications.Attackers can capture the data packets and uses to sniff to read the data.</span><br />
<span style="font-family: Trebuchet MS, sans-serif; font-size: large;"><br /></span>
<span style="font-family: Trebuchet MS, sans-serif; font-size: large;">For an attacker is to gain access to the network to capture the data, if attackers is to gain access to the network.</span><br />
<span style="font-family: Trebuchet MS, sans-serif; font-size: large;"><br /></span>
<span style="font-family: Trebuchet MS, sans-serif; font-size: large;">If attackers have physical access to a router or switch they can connect the sniffer and capture all trafic going through the system,strong physical security measures help migrate this risk.</span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMHpKtqYU0G0LHIoXtT4Glt1LWRv0Tnfgtv8P8lCTQptqPYZxlwRQrAZrYtVqahyphenhyphenMWpR0LTVkUEeGssxWublC3rpYq8ObBdmxBg7rF83FnYQYnlBNdq84A8LsWTuvbOjDmJ-lMCxgHoX32/s1600/Hacking+webserver.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="For an attacker is to gain access to the network to capture the data, if attackers is to gain access to the network." border="0" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMHpKtqYU0G0LHIoXtT4Glt1LWRv0Tnfgtv8P8lCTQptqPYZxlwRQrAZrYtVqahyphenhyphenMWpR0LTVkUEeGssxWublC3rpYq8ObBdmxBg7rF83FnYQYnlBNdq84A8LsWTuvbOjDmJ-lMCxgHoX32/s400/Hacking+webserver.jpg" title="For an attacker is to gain access to the network to capture the data, if attackers is to gain access to the network." width="400" /></a></div>
<span style="font-family: Trebuchet MS, sans-serif; font-size: large;"><br /></span>
<span style="font-family: Trebuchet MS, sans-serif; font-size: large;">As a Penetration tester and ethical hacker ,you must provide security to the company web server ,you must perform checks on the web server for vulnerabilities,is configuration, un patched security flaws and authentication with external systems.</span><br />
<span style="font-family: Trebuchet MS, sans-serif; font-size: large;"><br /></span>
<span style="font-family: Trebuchet MS, sans-serif; font-size: large;"><br /></span>
<br />
<ul style="text-align: left;">
<li><span style="font-size: large;">IIS Webserver Architecture</span></li>
<li><span style="font-size: large;">Why Web Server are Compromised</span></li>
<li><span style="font-size: large;">Impact of Webserver Attacks</span></li>
<li><span style="font-size: large;">Webserver Attacks</span></li>
<li><span style="font-size: large;">Webserver Attack Methodology</span></li>
<li><span style="font-size: large;">Webserver Attack Tools</span></li>
<li><span style="font-size: large;">Metasploit ArchitectureSec</span></li>
<li><span style="font-size: large;">Web password cracking tools</span></li>
<li><span style="font-size: large;">Patch management</span></li>
<li><span style="font-size: large;">Defend against web server</span></li>
<li><span style="font-size: large;">Webserver Server security tools</span></li>
<li><span style="font-size: large;">Webserver pen testing</span></li>
</ul>
<div>
<span style="font-size: large;"><br /></span></div>
<div>
<span style="font-size: large;"><br /></span></div>
<div>
</div>
<br />
<i><b><span style="font-size: large;">IIS Web server Architecture</span></b></i><div>
<i><b><span style="font-size: large;"><br /></span></b></i></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div>
<i><span style="font-size: large;">Internet Information Services for windows server is a flexible, secure,and easy to manage web server for hosting anything on the web<br /></span></i></div>
<div style="text-align: left;">
<b><span style="font-size: large;">Why Web Server are Compromised</span></b></div>
<div style="text-align: left;">
<b><span style="font-size: large;"><br /></span></b></div>
<div style="text-align: left;">
<ul style="text-align: left;">
<li><span style="font-size: large;">Security conflicts with the business ease of use,improper file and directory permisions</span></li>
<li><span style="font-size: large;">misconfiguration in webserver,operating systems and networks</span></li>
<li><span style="font-size: large;">improper authentication with external systems</span></li>
<li><span style="font-size: large;">use of self signed certificates and default certificates</span></li>
</ul>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1NpdlHQZOsSM7a66bJHLGuG_kbT2CbXV98Pq9JjWR5da2wuzXAW79Tns0mIkxJfFjnH2ZzgA3PtRpAczv06z44m8x6v_IyCKmM73y0flbD2NDfWv2IlQLqq7oLp9xABDzvjXKgcIkZL3v/s1600/webservers.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img alt="Internet Information Services for windows server is a flexible, secure,and easy to manage web server for hosting anything on the web" border="0" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1NpdlHQZOsSM7a66bJHLGuG_kbT2CbXV98Pq9JjWR5da2wuzXAW79Tns0mIkxJfFjnH2ZzgA3PtRpAczv06z44m8x6v_IyCKmM73y0flbD2NDfWv2IlQLqq7oLp9xABDzvjXKgcIkZL3v/s400/webservers.jpg" title="Internet Information Services for windows server is a flexible, secure,and easy to manage web server for hosting anything on the web" width="400" /></a></div>
<div>
<span style="font-size: large;"><br /></span></div>
</div>
<div>
<i><b><span style="font-size: large;">Impact of web server Attacks</span></b></i></div>
<div>
<i><b><span style="font-size: large;"><br /></span></b></i></div>
<div>
<i><span style="font-size: large;">Compromise of user accounts</span></i></div>
<div>
<i><span style="font-size: large;">Data Tampering</span></i></div>
<div>
<i><span style="font-size: large;">Website defacement</span></i></div>
<div>
<i><span style="font-size: large;">Secondary attacks from the website</span></i></div>
<div>
<i><span style="font-size: large;">Data theft</span></i></div>
<div>
<i><span style="font-size: large;">Root access to other applications or servers</span></i></div>
<div>
<i><span style="font-size: large;">\</span></i></div>
<div>
<i><b><span style="font-size: large;">Web Server Misconfiguration</span></b></i></div>
<div>
<i><b><span style="font-size: large;"><br /></span></b></i></div>
<div>
<i><span style="font-size: large;">Server misconfiguration refers to configuration weakness in web infrastructure that can be exploited to launch various attacks on web servers such as directory traversal server intrusion and data theft</span></i></div>
<div>
<i><span style="font-size: large;"><br /></span></i></div>
<div>
<i><b><span style="font-size: large;">Web Application Attacks</span></b></i></div>
<div>
<i><b><span style="font-size: large;"><br /></span></b></i></div>
<div>
<i><span style="font-size: large;">Vulnerabilities in web application running on a webserver provide a broad attack path for webserver compromise</span></i></div>
<div>
<i><span style="font-size: large;"><br /></span></i></div>
<div>
<i><b><span style="font-size: large;">Web server Attack Methodology </span></b></i></div>
<div>
<i><b><span style="font-size: large;"><br /></span></b></i></div>
<div>
<i><span style="font-size: large;">valuable system level information such as account details,operating system,software versions,server name and database schema details</span></i></div>
<div>
<i><span style="font-size: large;"><br /></span></i></div>
<div>
<i><b><span style="font-size: large;">Vulnerability Scanning</span></b></i></div>
<div>
<i><span style="font-size: large;"><br /></span></i></div>
<div>
<i><span style="font-size: large;">Scanning a identify weakness in a network and determine the system can be exploited</span></i></div>
<div>
<i><span style="font-size: large;">network traffic to find out active systems,network services,applications and vulnerablities</span></i></div>
<div>
<i><span style="font-size: large;"><br /></span></i></div>
<div>
<i><span style="font-size: large;"><br /></span></i></div>
<div>
<i><b><span style="font-size: large;">Metasploit Exploit</span></b></i></div>
<div>
<i><span style="font-size: large;"><br /></span></i></div>
<div>
<i><span style="font-size: large;">It is the basic Module in metasploit used to encapsulate an exploit using users target many platforms with a single exploits </span></i></div>
</div>

Hacking Web Servers

Hacking Web Servers A web server, which can be referred to as the hardware,the computer or the software is the computer application that ...