numberthirteen

WEB APPLICATION PENETRATION TEST

information gathering step to exploitation web application :

to get more information about web server, we can use many tool to help us, one of them is burp suit. in the meet before, we has studied about intercept and brute force passsword. in this session we will discuss about spider and repeater function in burp suit.

1. spider :

entry to the web's target. opn this page.


for example we entry mutillidae
dont forget to setting froxy for use burp suit

open burp suit and run it.
choose proxy and run intercept

back to web and reload the url to know the data packet that will send to server.

back to intercept, forward the data or script then turn of the intercept

we migrate to target column, in the column show many information about history of web had ever visited. choose the most black of that, because that url is the web which we visit know or mutillidae,
click right mouse than choose spider this hosts.
you will show all of link which in script or html format in that host like beside.


2. repeater

sometimes, to know how the web is work, we hav to try this application or running the application. we must try any possibility that will happen if we query a command. if we try step by step and one by one, more time be useless, its not effectivelly. to solve the problem we can use repeater function in the burp suit to help us for trying many possibilities will happen.

go to url or link which we want to analyze.

go to burp suit, choose proxy then turn on intercept

back to url or link, put in the variable which we want to analyze then submit

back to proxy. we saw the data packet in intercept

click action then choose send to repeater

go to the repeater column, now you could change the variable of parameter and know the effect or respons by click "go".
if you want try any possibilities else, you just change the variable of parameter then click "go" again to show the respons,



next, beside use burp suit, we can usse tools other like dirbuster. dirbuster works with brute forcing wordlists that its had. the wordlists consist of many name of file or directory that people ussually use in web application make.

first, we visit the url or link that we want to check or get information about directories name

open terminal, type dirbuster than click enter

will show dirbuster table,
put in the url than choose the wordlists, /usr/share/wordlist/dirbuster, select one of them

run this tools with click start
the tools will brute force the name of file or directory

the next step is service enumeration and vulnerability accessment, we can use many tools to get information about both of them like w3af, golismero, nikto etc. we will discuss one of them. there are nikto :

nikto is one of many scanner tools to get information about vulnerability of web application. the advantages of nikto than tolls other is nikto can search or scan automatically. we just type the command one times, wait and show the result, computer is work. the command :
nikto -host (url)




 

how to use sqlmap to inject web

we assumpt dvwa is the web's target,
make sure that security in low level,
then we entry to sql injection mode.


dont forget to setting proxy in your web browser, because we will use burp suit to intercept data packet

entry to burp suit, choose proxy then turn on the intercept.
back to web browser or dvwa, reload current page in url table to get the data packet from browser to server.
entry the burp suit again, angd youn will show data packet allready intercept in proxy burp suit.

all of data packet script save to file.
click right mouse, c
hoose save to file, create name of file than save.

entry to terminal, run the command
sqlmap -l (location and file name)
or
you come to the location of that file, then you type command, sqlmap -l (file name)

other way,
you can inject web use sqlmap with manually way,
entry to terminal, type command, sqlmap -u (url) -p (parameter that you want inject) --cookie(you will het from intercept data packet in row cookie)