Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Scribd Logo
Upload

Welcome to Scribd!

  • 14 views

    Web Server Misconfiguration: Figure 13-03 Robots

    Uploaded by

    Karen Garza
    The document discusses several types of web server attacks, including exploiting misconfigurations to gain unauthorized access, HTTP response splitting to redirect users to malicious websites, web cache poisoning to overwrite the server's cache with fake entries, and SSH brute-force attacks to gain access to encrypted tunnels. It also lists common web application attacks like SQL injection, session hijacking, and cross-site scripting. Finally, it covers information gathering techniques used by attackers to collect target data through social engineering, internet research, and tools to extract information from files like robots.txt.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Web Server Misconfiguration: Figure 13-03 Robots

    Uploaded by

    Karen Garza
    14 views1 page
    The document discusses several types of web server attacks, including exploiting misconfigurations to gain unauthorized access, HTTP response splitting to redirect users to malicious websites, web cache poisoning to overwrite the server's cache with fake entries, and SSH brute-force attacks to gain access to encrypted tunnels. It also lists common web application attacks like SQL injection, session hijacking, and cross-site scripting. Finally, it covers information gathering techniques used by attackers to collect target data through social engineering, internet research, and tools to extract information from files like robots.txt.

    Original Description:

    hacking

    Original Title

    CEH V10-56-7

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document discusses several types of web server attacks, including exploiting misconfigurations to gain unauthorized access, HTTP response splitting to redirect users to malicious websites, web cache poisoning to overwrite the server's cache with fake entries, and SSH brute-force attacks to gain access to encrypted tunnels. It also lists common web application attacks like SQL injection, session hijacking, and cross-site scripting. Finally, it covers information gathering techniques used by attackers to collect target data through social engineering, internet research, and tools to extract information from files like robots.txt.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    14 views1 page

    Web Server Misconfiguration: Figure 13-03 Robots

    Uploaded by

    Karen Garza
    The document discusses several types of web server attacks, including exploiting misconfigurations to gain unauthorized access, HTTP response splitting to redirect users to malicious websites, web cache poisoning to overwrite the server's cache with fake entries, and SSH brute-force attacks to gain access to encrypted tunnels. It also lists common web application attacks like SQL injection, session hijacking, and cross-site scripting. Finally, it covers information gathering techniques used by attackers to collect target data through social engineering, internet research, and tools to extract information from files like robots.txt.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 1

    Web server Misconfiguration

    Another method of attack is by finding vulnerabilities in a website and exploiting


    them. An Attacker may look for misconfiguration and vulnerabilities of system and
    components of the web server. An attacker may identify weaknesses in terms of the
    default configuration, remote functions, misconfiguration, default certificates and
    debugging to exploit them.
    HTTP Response Splitting Attack
    HTTP Response Splitting attack the technique in which an attacker sends response
    splitting request to the server. By this way, an attacker can add the header response,
    resulting the server will split the response into two responses. The second response is
    under control of the attacker, so user can be redirected to the malicious website.
    Web Cache Poisoning Attack
    Web Cache poisoning attack in a technique in which attacker wipe the actual cache of
    the web server and store fake entries by sending a crafted request into the cache. This
    will redirect the users to the malicious web pages.
    SSH Brute-force Attack
    Brite forcing the SSH tunnel will allow the attacker to use encrypted tunnel. This
    encrypted tunnel is used for the communication between hosts. By brute forcing the
    SSH login credentials, an attacker can gain unauthorized access to SSH tunnel.
    Web Application Attacks
    Other web application related attacks may include:
     Cookie Tampering
     DoS Attack
     SQL Injection
     Session hijacking
     Cross-Site Request Forgery (CSRF) attack
     Cross-Site Scripting (XSS) attack
     Buffer overflow attack

    Information Gathering
    Information gathering includes a collection of information about target using different
    platforms either by social engineering, internet surfing, etc. An attacker may use
    different tools, networking commands for extract information. An attacker may
    navigate to robot.txt file to extract information about internal files.

    Figure 13-03 Robots.txt file

    Page 392 of 503

    You might also like