Subnetting

What is subnetting?

subnetting is a technique to break up a large network into smaller networks by sacrificing bit Host ID on the subnet mask to be used as a new Network ID.

WebGoat Installation - OWASP

WebGoat is a deliberately vulnerable Web application, now including helpful hints and videos to guide you into hacking it. 

=> Instal Java or download at http://java.com
=> Insatall Apache Tomcat or download at http://tomcat.apache.org/  

=> Download the WebGoat at here

=> extract it using command :

   p7zip -d WebGoat-OWASP_Standard-5.3_RC1.7z

File Inclusion (DVWA)

LFI (Local File Inclusion) is a hole at the site where the attacker can access all files on the server with only through the URL.

RFI (Remote File Inclusion) is a hole where the site permits an attacker to include a file from outside the server.

SQL Injection (DVWA)

SQL injection or SQLi is a code injection technique that exploits a security vulnerability in some computer software. An injection occurs at the database level of an application (like queries). The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly executed

Blind SQL Injection

This is a hacking method that allows an unauthorized attacker to access a database server. It is facilitated by a common coding blunder: the program accepts data from a client and executes SQL queries without first validating the client’s input. The attacker is then free to extract, modify, add, or delete content from the database. In some circumstances, he may even penetrate past the database server and into the underlying operating system.

SQL Injection

SQL injection is a hacking technique is performed in the client application by modifying an existing command in memory MySQL client applications. 


this is also a technique in which to exploit web applications using database for data storage.

BUSINESS LOGIC TESTING

Testing for business logic flaws in a multi-functional dynamic web application requires thinking in unconventional ways. If an application’s authentication mechanism is developed with the intention of performing steps 1,2,3 in order to
authenticate, what happens if you go from step 1 straight to step 3? In this simplistic example, does the application provide access by failing open, deny access, or just error out with a 500 message? There are many examples that can be made, but the one constant lesson is “think outside of conventional wisdom”. This type of vulnerability cannot be detected by a vulnerability scanner and relies upon the skills and creativity of the penetration tester. In addition, this type of vulnerability is usually one of the hardest to detect, but, at the same time, usually one of the most detrimental to the application, if exploited.