Security-Testing

New Post has been published on http://www.security-testing.net/blog/?p=171

70 Pakistan Government Websites Hacked.

Pakistan government webserver hacked by Bangladeshi hackers and defaced 70 number of government websites hosted in that webserver.

The list of hacked websites,

http://pakistan.gov.pk/web/

http://president.gov.pk/web/

http://pmo.gov.pk/web/

http://nheprn.gov.pk/web/

http://estate-office.gov.pk/web/

http://raha.safron.gov.pk/web/

http://ntb.gov.pk/web/

http://saarcstat.org

http://msw.establishment.gov.pk/web/

http://prw.gov.pk/web/

http://ombudsman.gov.pk/web/

http://federalombudsman.gov.pk/web/

http://pcb.gov.pk/web/ …etc

You can get the entire list here.

Mirror Links:

Mirror-Zone

New Post has been published on http://www.security-testing.net/blog/?p=164

RC4 Encryption Algorithm – Cracking

What is RC4?

RC4 is an encryption algorithm in cryptography, which is widely using for internet protocols like TLS (Transport Layer Security), WPA, and WEP.

Is it possible to crack RC4 encryption?

Yes! Security researchers Mathy Vanhoef and Frank Piessens have published a white paper called “RC4 NOMORE” with proof of concept video of cracking the RC4 encryption algorithm in their website called www.rc4nomore.com,

You can download the white paper directly form here.

Watch the RC4 cracking proof of concept video,

New Post has been published on http://www.security-testing.net/blog/?p=160

DDoS - Exploined

What is DDoS?

DDoS (Distributed Denial of Service) is a web based attack vector, which is used to make a network or web resources like website or web application unavailable for its legitimate users.

Most of the case attacker use his Botnet controlled zombie machines to perform this DDoS attack.

For better understanding watch video.

New Post has been published on http://www.security-testing.net/blog/?p=155

Website Security Testing - Checklist

In this post I am going to list OWASP’s website security testing checklist.

OK! But what is website security testing?

Website security testing is a process of checking vulnerability in particular website or web application, Mostly these testings are done by manually or with automated tools.

Website Security Testing Checklist:

Information Gathering

Configuration Management

Secure Transmissions

Authentication

Session Management

Authorization

Data Validation

Denial of Service

Business Logic

Cryptography

Risky Functionality- File Uploads

Risky Functionality- Card Payment

Error Handling

New Post has been published on http://www.security-testing.net/blog/?p=151

Backdoor Shell - Web Application

Backdoor Shell is a piece of programming code or script (PHP,ASP,JSP), which can be used to gain full control of web server or application.

Most of the case this shell’s are used to upload a defacement page or download some confidential information like customer data, credit card details that is stored in that particular server.

Famous Backdoors are,

C99

R57

C100

ASPXspy2

dQ99shell

TrYaG Shell

ANGEL SHELL

New Post has been published on http://www.security-testing.net/blog/?p=147

Web Application Security Testing Tools

In this post we are going to discusses about tools and browser add-on which is used to do security auditing and testing for web application and websites.

And these tools are open source so you can download it for free of cost.

Tools List

Burp Suite:

Burp Suite is one of the best applications which is used to finding vulnerability in web application and websites.

Wapiti:

Wapiti is a powerful tool to perform website and web application auditing. With this tool you can do block box testing.

WebScarab:

WebScarab is web application security testing tool. This tool act as a local proxy server so that you can integrate you web browser and perform a security testing.

Sqlmap:

Sqlmap is one of the hacker favorite tools to perform SQL Injection attack against web application and sites; with this tool you can do security testing.

Add-ons List

Firebug:

Firebug is a browser add-on which allows you to edit the page source and values.

Cookies Manager:

Cookies Manager allow you to edit and modify the cookie values.

XSS Me:

XSS Me add-on is used to do cross site scripting attack in web applications and sites.

SQL Inject Me:

New Post has been published on http://www.security-testing.net/blog/?p=140

Website Sanning With Security-Testing

Security-Testing is an awesome cloud scanning platform for web applications and websites. With this cloud tool you could conduct security auditing for your websites by yourself, and also you can download the clear audit report.

Security-Testing scan for malware and wide range of web application vulnerability like OSWAP’s top ten web attacks and more, you can find entire list in their official page.

For better understanding watch this video…

Security-Testing offers,

SERM

Malware Detection

Vulnerability Scanning

Performance

Monitoring

Inventory and Trustmark Seal

New Post has been published on http://www.security-testing.net/blog/?p=133

Cross-Site Request Forgery (CSRF) Attack

Cross-Site Request Forgery (CSRF) is one of OWASP’s top ten attack vector for web application, and it’s a very dangerous attack.

In this CSRF method attacker deceive victim’s Browser toexecute the malicious script to perform a particular task. For example, assume Mr. Jack login to his bank account, so currently he have active session in his browser, then he access his mail account checking for mail at the same time he sees a mail from an “[email protected]“ in which there is a link to check his account statement.So Jack clicks that link and checks his account statement. Then he closes that page and continues his regular browsing Later he tries to make a transaction but he couldn’t, so he checks his account online once again and he is shocked to find out his account is cleared out by some unknown person. So how this has happened. Yes! You are thinking right… The attacker created a fake account statement page with his malicious <image> or <iframe> Tag through which he was able to transfer the entire amount form Jack’s account to his bank account.

<img src=”onlineabank.com/transfer/jack_bal?=123456789&attacker=0987654321>”

New Post has been published on http://www.security-testing.net/blog/?p=123

Web Parameter/HTTP Tampering Attack

   Web Parameter Tampering or HTTP Tampering attack is manipulation of parameters that is exchanged between client and server in order to modify application data, like user info or price, quantity, count, etc…

There is lot of open source tools available to do this attack, but most hackers and security professionals using Burp Suite or Firefox with Tamper Data Add-on.

New Post has been published on http://www.security-testing.net/blog/?p=112

Kali Linux 2.0 - Advanced Penetration Testing Distribution

Kali Linux is one of the advanced open source penetration testing OS, spicily designed for penetration testers and ethical hackers.This operating system contains lot of penetration testing and hacking tools that is used to do security testing and cyber forensic investigation.

You can download the current version of Kali OS from their website https://www.kali.org

Now! Official they announced Kali 2.0  release date is August 11th,2015.

So you people are ready to download your free version of Kali 2.0 but before that watch this awesome teaser.

New Post has been published on http://www.security-testing.net/blog/?p=102

Cross Site Scripting Attack (XSS)

Cross Site Scripting (XSS) is a type of code injection based attack, with this injection attack attacker can execute malicious script with help of end user browser application.

There are two types of Cross Site Scripting:-

Persistent

Non-Persistent

Persistent XSS :

In this type of XSS attack, attacker can steal active session cookies of users who visit that injected web page.

For example if that website admin visiting that injected page means attacker can able to access his session cookies so that attacker can gain admin access of that web site.

Non-Persistent XSS :

In this Non-Persistent XSS method attacker will craft a malicious link to target victim. When the victim clink or visit that link, the victim browser will execute the malicious so that attacker can gain session cookies.

New Post has been published on http://www.security-testing.net/blog/?p=93

Learn Web Application Hacking and Security Testing

Yes! You can hack and learn web application in your own system.

How…?

With help of XAMPP and DVWA (Damn Vulnerable Web Application).

You can setup a  vulnerable web application and server. So that you can practice security testing and website hacking in your very own web server (your system).

Steps to config..

Download XAMPP and DVWA from their websites.

Just run the XAMPP setup and install it to your system.

Once completed you XAMPP installation, open your web browser and type http://127.0.0.1 or http://localhost (you can access the XAMPP control panel just close that window)

Then extract the “DVWA-1.0.8.zip” file into this “C:\xampp\htdocs” path.

Now, edit this file “C:\xampp\htdocs\dvwa\config\config.inc.php” with notepad and change database password. (By default there is no password for your database root account so you just simply change it with this line $_DVWA[ 'db_password' ] = ”;  )

Finally open your web browser and type this URL  “http://localhost/dvwa/setup.php”

Clink the “Create / Reset Database” button.

Done! now you have successfully setup the web server and web application in your system.

New Post has been published on http://www.security-testing.net/blog/?p=84

SQL Injection

SQL injection attack is one of the major attack vector for web applications. This attack is holding number one position in OWASP’s top 10 web application attacks list.

What is SQL Injection?

  SQL Injection is a code injection technique to get information like database tables and column with malicious SQL query.

How to do SQL Injection?

There is two methods to do this attack that is Manual SQL Injection and Automated SQL injection.

Manual SQL Injection:

Attacker have to perform SQL Injection attack with manual SQL queries over browser URL links.

Automated SQL injection:

Attack will perform SQL Injection with some automated tools like ‘sqlmap’. So tool will check all kind of SQL Injection queries.

Some famous SQL Injection tools:-

SQLmap

sqlninja

havij (Commercial Tool)

Example:-

This is basic example for SQL Injection, here we gonna use google dork to do this attack.

Search this key word with google ” inurl: ‘admin.aspx’ ” then you will some results with admin login panel page.

Then, use this 1’or’1’=’1  query as username and password… You can able to login as admin.

New Post has been published on http://www.security-testing.net/blog/?p=79

Top 10 Web Application Attacks.

In this post we gonna discusses about OWSAP’s top ten web attacks vectors.

    Who and What is OWSAP ?

  OWASP is abbreviation of Open Web Application Security Project.which is a community for web application security.

Top 10 Web Application Attacks:-

SQL Injection

Broken Authentication &  Session Management

Cross-Site Scripting (XSS)

Insecure Direct Object References

Security Misconfiguration

Sensitive Data Exposure

Missing Function Level Access Control

Cross-Site Request Forgery (CSRF)

Using Components with Known Vulnerabilities

Unvalidated Redirects and Forwards

New Post has been published on http://www.security-testing.net/blog/?p=70

WiFi Hacking

What is WIFI?

WiFi is a wireless based local area networking technology (IEEE 802.11) which is used to        connect various  electronics devices to the  local network without any wire connectivity.

Modern WiFi routers using various type of security protocols like WEP (Wired Equivalent Privacy), WPA (WiFi Protected Access), WPA2.

WEP protocol is not secure, attacker can easily able to hack this protocol without any difficult. But WPA/WPA2 protocol is more secure that is compared to WEP protocol.

How to hack WIFI network?

WEP encrypted network can easily hackable with Aircrack-ng  tool. Aircrack is Open Source tools works in Linux environment. With this 5 to 10 mints enough to hack an WEP encrypted WiFi network (So any of you people still using WEP encryption means immediately change WEP to WPA/WPA2 ).

Is WPA / WPA2 not hackable?