OP 30 September, 2024 - 11:28 PM
1. Web hacking involves exploiting vulnerabilities in websites and web applications. Common vulnerabilities include SQL Injection, Cross-Site Scripting (XSS), and more. Ethical hackers use these methods to test and secure websites.
2. Tools Used in Web Hacking
- Burp Suite: Popular for web vulnerability scanning.
- OWASP ZAP: Open-source tool for finding security issues.
- SQLmap: Automates SQL injection attacks.
- Nmap: Network scanning and reconnaissance tool.
- Nikto: Web server vulnerability scanner.
- SQL Injection: Injecting malicious SQL queries to manipulate a database.
- Cross-Site Scripting (XSS): Injecting malicious scripts into web pages viewed by users.
- Cross-Site Request Forgery (CSRF): Forcing a user to execute unwanted actions.
- Reconnaissance: Gathering information using tools like Nmap and Shodan.
- Exploitation: Using SQLmap for SQL Injection and Burp Suite for XSS attacks.
- Post-Exploitation: Maintaining access with tools like Weevely or a web shell.