Cyber Security | Web Development

What is Web Cache Poisoning Web cache poisoning is a type of web security vulnerability in which an attacker manipulates the contents of a web cache to serve malicious content to unsuspecting users. This is achieved by injecting specially crafted HTTP requests into the web application or server, causing the cache to store the attacker's malicious content. When users subsequently access that content, they may unknowingly be served the attacker's malicious version, potentially leading to a range of security issues.  PRE - Requirement:  Param Miner extension in burp suite. Scope Vulnerability: https://34d8a6c9.poison.digi.ninja:2443/basic.php Step 1: Install Extension on burp suite (Already, I am installed on my Burpsuite) Step 2: Intercept the application request and forward it to the repeater for exploiting purposes and finding the unkeyed inputs which vulnerable to web cache poison. Send the requests multiple times and check the extension to find the vulnerable headers or pa...

SQL Injection using (SQLMAP TOOL) SQL MAP: SQLMAP is an open-source penetration testing tool written in python to detect and exploit SQL Injection flaws. It works for all modern databases including MySQL, PostgreSQL, oracle, Microsoft SQL server, etc Step 1: Find the SQL Error parameter variable in the application. Step 2: Copy the URL path and paste it into the sqlmap tool. CMD:  $ sqlmap -u http://testphp.vulnweb.com/listproducts.php?cat=1 --dbs       --dbs = Enumerate the databases.     -u = url Step 3: Enumerate the table lists from the database. CMD: $ sqlmap -u http://testphp.vulnweb.com/listproducts.php?cat=1 information_schema --tables Step 4: Dump the user table information from the database. $ sqlmap -u https://testdemo.com/sports.php?id=1 acuart --tables users --dump

XSS Brute Force Payloads using Burp Suite  Step 1: Get the parameter variable from the scope URL. Step 2: Intercept the parameter value using the burp suite application as shown in the below screenshot. Step 3: Clear and add the variable position which goes to perform an attack on the brute force of XSS payloads. Step 4: Install xssValidator extension in the burp suite and we can also add custom payloads in the below payloads box. Step 5: Set the following options in the Payloads option. Step 6: In Intruder clear, the Grep-Match and Grep-Payloads checked option search responses for payload strings. Step 7: Copy the grep phase from xssValidator and paste it into the intruder grep-match. Step 8: Unchecked the option from the payload encoding. Step 9: Start the attack and check the results with the grep value is 1 manually in the web browser which exploited the XSS attack payload.

  Download WPScan using Docker in Kali Tool Description: It is used  to scan WordPress websites for known vulnerabilities both in WordPress and commonly used WordPress plugins and themes . The code base for WPScan is licensed under GPLv3. WPScan is a WordPress black box scanner. Step 1:      sudo apt install docker.io Step 2:     sudo  docker pull wpscanteam/wpscan Step 3:      sudo docker run -it --rm wpscanteam/wpscan --url https://domain.in --enumerate u1-100 --random-user-agent      u - Users Enumeration POC Note : If you are concerned with the API key register and get the free API key. Link in the below:      https://wpscan.com/

  Clickjacking Description: Clickjacking is  an attack that tricks a user into clicking a webpage element that is invisible or disguised as another element . This can cause users to unwittingly download malware, visit malicious web pages, provide credentials or sensitive information, transfer money, or purchase products online. Impact: The user assumes that they're entering their information into a usual form but they're actually entering it in fields the hacker has overlaid on the UI . Link URL: https://clickjacker.io/ POC: The simplest way to identify our application is from a clickjacking attack.

                                                          ParamSpider Tool ParamSpider  is a Python language-based tool, an open-source tool used to dig parameters from web archives without interacting with the victim host. For digging parameters, the ParamSpider tool uses various techniques and wordlists . However, these parameters are most useful for security researchers or bug bounty hunters because they can easily test several bugs such as XSS, SQL injection, SSRF, or open redirect . Key Features of ParamSpider Tool 1.    ParamSpider Diggs hidden parameters from web archives of the entered target host. 2.    ParamSpider also finds parameters from target subdomains. 3.    ParamSpider gives support to URLs with specific extensions . 4.    ParamSpider mi...

 W eb Application Vulnerability Scanner  Tool Name:  NUCLEI   Description      Nuclei are used to send requests across targets based on a template, leading to zero false positives and providing fast scanning on a large number of hosts. Nuclei offer to scan for a variety of protocols, including TCP, DNS, HTTP, SSL, File, Whois, Websocket, Headless, etc. With powerful and flexible templating, Nuclei can be used to model all kinds of security checks.           Nuclei are a fast, template-based vulnerability scanner focusing on extensive configurability , massive extensibility, and ease of use. Installation & Demonstration Usage:      CMD : nuclei -h Step 1:      Download and install before use nuclei Go lang in kali linux      CMD : sudo apt-get update & sudo apt-get upgrade      CMD: sudo apt-get install -y golang Step 2:      Download and in...