Finding and calling analyzed error messages allows you to identify the running services and technologies used by applications. In calling errors, it is most effective to manually modify HTTP queries by randomly inserting unusual characters into different parts of the http query. In one of the applications tested, the sample… Continue reading →
The purpose of this test is to find open ports and identify the services running on them, such as databases or administrative interfaces. Useful tools will be here – nmap port and service scanner and security scanner of web applications Nikto. The image below shows the result of scanning the… Continue reading →
Using the analysis of the so-called For example, you can find out in the server response headers to HTTP queries what programming language and server infrastructure was used to build the application. It is also useful to analyze error messages and source code. The figure below shows an example server… Continue reading →
The purpose of identifying entry points to the application is to understand the protocols and methods used to transmit information between the client and the server. See what individual parameters are accepted through HTTP queries, what information cookies are stored and what headers are used. This is shown in the… Continue reading →
Mapping web application resources can reveal important information about the tree and directory structure of your application, thereby revealing information about the software used, its version, or the programming language used in the construction. It consists in building a systematic view, which usually hierarchically shows what data the WEB application… Continue reading →
When you run a penetration test of a web application, you can generalize several steps. Each of them is characterized by the use of different tools and the same result obtained. It can also be noted that individual phases do not always occur closely after each other. Most often, however,… Continue reading →
According to statistics maintained by theOpen Web Application Security Project (OWASP), the ten most common security errors can be distinguished. The graphic below shows how often veracode, a web application security research organization, detects these vulnerabilities during a preliminary risk assessment. The vulnerability detection rate from the OWASP Top 10… Continue reading →
Penetration testing can be defined as a legitimate and authorized attempt to find andexploit security vulnerabilities in computer systems to improve the security of these systems. This process includes testing vulnerabilities as well as providing complete evidence of a so-called "vulnerability" attack. POC (proof of concept). This is to confirm… Continue reading →
Speed of information transmission plays an important role in the modern world. The development of technology has made it necessary to operate in a constant hurry, in fact, where "every minute is at a premium". An example of this phenomenon is brokerage houses, which build their headquarters as close as… Continue reading →
Cześć podróżniku!
Jestem Michał. Cyberbezpieczeństwo jest moją pasją i pracą. Hobbystycznie zajmuję się drukiem 3d. W ramach tej strony staram się dzielić się wiedzą właśnie z tych obszarów. Mam nadzieję, że znajdziesz tutaj przydatne dla siebie informacje :)
Więcej o mnie...
Subscription
Wspieraj tę stronę
Jeżeli podoba Ci się moja twórczość możesz mnie wesprzeć kawą :)
