Hack Like a Pro: How to Hack Web Apps, Part 1 (Getting Started) « Null Byte :: WonderHowTo

Welcome back, my budding hackers!With this article, I am initiating a new series thatsomany of you have been asking for:Hacking Web Applications.In previous tutorials, we have touched on some of the techniques and tools for web app hacking. We looked atweb app vulnerability testing,website cloning,web app footprinting,web app password cracking, and many others. In this series, we will begin with the basics and slowly advance to more advanced techniques and tools. This is likely to be a very long series.Let's begin by first giving you links to what we have already covered and then proceed to the basics of the attack vectors for web applications.Vulnerability scanning with NiktoVulnerability scanning and backend mapping with WiktoWeb application password cracking with Burp Suite and THC-HydraScraping potential passwords with CeWLSQL injection with sqlmapUsing BeEF to control the user's browserCross-site scripting (XSS) with MetasploitFinding website directories with DirBusterHacking web applications and this series can be broken into several areas.Mapping the Server & ApplicationLike any hack, the more we know about the target, the better our chances of success. In the case of web applications, we probably want to know the target OS, the web server, and the various technologies supporting the web application.In addition, mapping the application might include enumerating content and functionality, analyzing the application, identifying the server-side functionality, and mapping the attack surface. It's essential that we do this first and accurately before proceeding to any attack.Web Application Attack VectorsAlthough there are literally hundreds of ways of hacking web applications, they can be grouped into eight (8) basic types.Hacking Client Side ControlsOne of the most popular areas of web app hacking is attacking the client-side controls. In this regard, we will look at transmitting data via the client and capturing user data.Hacking AuthenticationWe have looked briefly at hacking web app authentication withTHC-Hydra and Burp Suite, but we will look at some other authentication tools as well as bypassing authentication such as capturing tokens and replaying them, client-side piggybacking, and cross-site request forgery.Hacking Session ManagementWe will look at ways to hack the application's session management. Session management enables an application to uniquely identify a user across multiple requests. When a user logs in, session management enables the user to interact with the web app without having to re-authenticate for every request. Due to its key role, if we can break the application's session management we can bypass the authentication. Thereby, we won't need to crack the username and password to gain access.Hacking Access Controls & AuthorizationIn this area, we will examine how to fingerprint ACLs and attack the ACLs in ways that will allow us to violate the ACLs.Hacking Back End ComponentsWe have done a bit of back-end hacking such asSQL injection with sqlmap, but we will expand this area with new SQLi tools and also attack and inject XPATH and LDAP. We will also look at path or directory traversal, file inclusion vulnerabilities, XML, and SOAP injection.Hacking the UserHacking the user is one of my favorite web app hacks. Technically, it's not web app hacking as we are actually hacking the end user, not the web app, by getting them to travel to our website and load malware to their browser and potentially their system. These techniques include cross-site scripting (XSS), cross-site request forgery, attacking the browser, andviolations of the same origin policy.Hacking the Web Application ManagementIn many cases, the web applications have a management console or other management interface. If we can access that console or interface, we can conceivably change everything about the website including defacing it.Hacking the Web ServerIn some cases, we can hack the underlying server of the web applications such as Microsoft's Internet Information Server (IIS), the Apache Project's Apache server, or Nginx. If we can gain control and access to the underlying server, it may give us an entry point to the web applications.Keep coming back, my budding hackers, as we expand our repertoire of hacking tools and techniques to include web app hacking!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseCover image viaShutterstockRelatedNews:How to Study for the White Hat Hacker Associate Certification (CWA)Best Android Antivirus:Avast vs. AVG vs. Kaspersky vs. McAfeeHow To:Perform Quick Actions with Custom Status Bar GesturesHack Like a Pro:How to Hack Web Apps, Part 4 (Hacking Form Authentication with Burp Suite)How To:The Safest Way to Disable ALL Bloatware on Your Galaxy S10How To:Get Nokia's Exclusive Camera App with Pro Mode on Any AndroidHack Like a Pro:How to Hack Web Apps, Part 5 (Finding Vulnerable WordPress Websites)Hack Like a Pro:Linux Basics for the Aspiring Hacker, Part 11 (Apache Web Servers)Hack Like a Pro:How to Hack Web Apps, Part 2 (Website Spidering with WebScarab)How To:If You're Seeing Lock Screen 'DU' Malware When Charging, Uninstall These Apps Right NowNews:10 Great 99 Cent Apps You Need on Your Android Right NowHack Like a Pro:How to Hack Web Apps, Part 6 (Using OWASP ZAP to Find Vulnerabilities)How To:Force Restart Your iPhone 11, 11 Pro, or 11 Pro Max When It's Acting UpNews:The 5 Best Apps for Scanning Text & Documents on AndroidHow To:Hack web browsers with BeEFHow To:Launch Apps, Tasks, & Websites Directly from Your iPhone's Notification CenterHow To:A Security Bug Just Made It Risky to Open Links on Your iPhone—Here's How to Protect YourselfNews:Now You Can Fix Your Apple Device with a Little Help from Their Support AppNews:Make Use of Your Bigger Screen with These 12 Tablet-Ready AppsHow To:Save Custom Shooting Presets in Filmic Pro So You Don't Have to Adjust Settings Later for Similar ShotsHow To:Copy, Share & Search Text from Almost Anywhere in Chrome on AndroidHow To:The Safest Way to Disable All Bloatware on Your Galaxy S9 or S9+How To:Expand Your Coding Skill Set with This 10-Course Training BundleHow To:10 Life Hacks That'll Make Your Life Easier & Stress-FreeHow To:You Can Easily Hack Instagram for a Crazy Amount of Likes (But You Totally Shouldn't)News:Revamped Video Tab Testing Shows Facebook Really Wants to Compete with YouTubeHow To:Generate Viral Memes Like a Pro with These Apps for Your iPhoneHow To:Temporarily Disable Your Instagram Account When You Need to Take an #InstaBreakHow To:Change Your Step Count Goal in Samsung HealthHow To:Get LED Color Effects for Music Playing on Your AndroidNews:What to Expect from Null Byte in 2015How To:Never Get Raided Again in Clash of Clans for Android Using This HackHow To:Launch Apps from the Side of Your Screen (A Perfect Mod for the Galaxy S6 Edge)How To:The Official Google+ Insider's Guide IndexHow To:Hack Anyone's Facebook, Twitter or YouTube Account with Your Android DeviceCommunity Byte:HackThisSite Walkthrough, Part 3 - Legal Hacker TrainingNull Byte:Never Let Us DieTHE FILM LAB:Intro to Final Cut Pro - 02Community Byte:HackThisSite Walkthrough, Part 2 - Legal Hacker Training