net App Hacking: internet utility technology, element 1earlier than embarking upon the have a look at of net software hacking,

To hack the web packages  net App Hacking: internet utility technology, element 1:

you need to be familiar with the technology being used by web apps. , we need as a minimum a cursory understanding of the multitude of technologies being applied into modern net packages. To that quit, i can try to offer you the fundamentals on the key internet technologies that can be exploited in taking manage of an internet software.

HTTP Protocol

The HyperText switch Protocol or HTTP is the granddaddy of internet technologies. it’s far the core communique protocol of the web and all internet applications use it. it is a easy protocol at the beginning designed to retrieve static web pages. through the years, it’s been up to date and prolonged to provide support to complex programs which can be commonplace these days.

HTTP makes use of a message primarily based version wherein the customer sends a request and the server responds with a response. it’s far connection-much less, however makes use of TCP as its delivery mechanism.

HTTP Requests

All HTTP messages comprise the same simple factors;

1. One or greater headers

2. Then a blank line

three. An non-obligatory Message body

the primary line of the HTTP requests has 3 elements, separated by way of areas

1. A verb (motion word) indicating the HTTP approach (see methods underneath). amongst these, the maximum common is GET. The GET method retrieves a useful resource from the web server

2. The requested URL

three. The HTTP model used

HTTP Responses

the standard HTTP response includes three objects;

1. The HTTP version

2. The numeric repute code (see status codes beneath).

3. The text describing the popularity reaction.

HTTP methods

when we attack net packages, we are maximum typically making a request to the internet server. this means that our methods will probable be either a post or GET. There are subtle differences among these two requests.

The GET technique is constructed to retrieve assets.

The publish technique is constructed to carry out moves.

other techniques

HEAD capabilities similar to a GET request, but no message body is lower back

trace is used for diagnostic purposes

options asks the server to document HTTP techniques are available

put tries to add a resource to the server which is contained in the frame

URL’s

The uniform resource locator (URL) is a unique id for every web useful resource for which a aid may be retrieved. this is the all acquainted URL that we use each day to get entry to data at the web.

The primary syntax of the URL is:

protocol://hostname[:port]/ [/path/] record [?param=value]

The port range is non-obligatory and only essential if the port isn’t like the default port used by the protocol exact inside the first field (http=eighty, https=443, ftp=21, etc).

HTTP Headers

there are various forms of HEADERS in HTTP. a few can be used for both requests and responses and others are specific to the message types.

those are a number of the not unusual header sorts;

wellknown Headers

* Connection – tells the opposite cease whether connection ought to close after HTTP transmission

* content-Encoding – specifies the form of encoding

* content-period – specifies the content duration

* content material-kind – specifies the content type

* switch-Encoding – specifies the encoding at the message frame

Request Headers

* accept – specifies to the server what form of content material it’s going to accept

* receive-Encoding – specifies to the server what form of message encoding it’s going to accept

* Authorization – submits credentials

* Cookie – submits cookies to server

* Host – specifies host name

* If-changed-considering the fact that – specifies while browser ultimate obtained the useful resource. If no longer modified, the server instructs the consumer to apply cached reproduction

* If-None-fit – specifies entity tag

* foundation – specifies the area in which the request originated

* Referer – specifies the URL of the requestor

* person-Agent – specifies the browser that generated the request

reaction Headers

* access-control-permit-origin – specifies whether or not the aid may be retrieved via cross-domain

* Cache-control – passes caching directive to the browse

* Etag – specifies an entity tag (notifies the server of the model in cache)

* Expires – specifies how long the contents of the message body are valid

* area – used in redirect responses (3xx)

* Pragma – passes caching directives to browser

* Server – specifies the web server software

* Set-Cookie – problems cookies

* WWW-Authenticate – affords info of form of authentication supported

* X-body-alternatives – whether and how reaction may be loaded within browser body

Cookies

Cookies are vital a part of HTTP. Cookies permit the server to ship objects of data to the client and the consumer shops this facts and resubmits it to the server the subsequent time a request is made to the server.

The server problems a cookie to the patron the usage of the SET-COOKIE reaction header.

SetCookie: monitoring=wdr66gyU34pli89

when the user makes a next request to the server, the cookie is added to the header.

Cookies are used to identify the person to the server and other key information to the server. those cookies are usually a name/value pair and do not contain a area.

wi-fi networks are not unusual in corporation environments, making them a top aim for penetration testers. additionally, misconfigured wireless networks may be effortlessly cracked, providing penetration testers with a remarkable deal of precious records about the community and its customers. this newsletter explores some of the maximum notably-used equipment for precise elements of wireless network hacking.

dual pentesting certifications
examine the equipment and strategies used by cybercriminals to carry out a white-hat, ethical hack for your agency.

community discovery
in advance than attacking a wireless community, it’s miles critical to understand that it exists. a few unique system offer network discovery capability to help with figuring out wi-fi networks and extracting useful traffic for use in an assault.

1. Kismet
Kismet is one of the maximum famous wi-fi hacking equipment available. it’s far a network sniffer able to tracking 802.11 wi-fi site visitors similarly to special wireless protocols, together with Bluetooth and Zigbee.

Kismet is available on all working systems and might run the use of any wi-fi card that facilitates radio frequency tracking mode (RFMON). It passively collects packets to pick out each broadcasting and hidden wi-fi networks.

download Kismet: https://www.kismetwireless.net/downloads/#kismet-launch

2. KisMac
KisMac, as its name indicates, is designed to be a Kismet clone available on macOS. Like Kismet, KisMac plays passive community tracking and may try and crack WEP and WPA keys the usage of brute strain password guessing or exploiting appeared flaws in legacy protocols.

down load KisMac: http://kismac-ng.org/

three. inSSIDer
inSSIDer is a wi-fi scanner for Microsoft domestic home windows and macOS systems. The device is available below a freemium model, wherein a few functionality is available without cost however the full tool calls for a subscription. The primary use of this device is through wireless directors looking to come across and diagnose problems interior wi-fi networks.

inSSIDer offers severa one-of-a-kind features, such as locating open wireless get entry to points, tracking the sign energy of wireless networks and saving logs with area information pulled from GPS.

download inSSIDer: https://www.metageek.com/products/inssider/

four. CommonView for wi-fi
CommonView for wi-fi is a wireless community sniffer for 802.11 a/b/g/n/ac/ax networks. It captures each packet being despatched over the network and offers several distinct facts. the ones facts are valuable for each coming across wireless networks and figuring out any ability issues within them. As a result, CommonView for wi-fi is regularly used by community directors.

down load CommonView: http://www.tamos.com/merchandise/commwifi/

Password cracking net App Hacking: internet utility technology,
wi-fi networks use encryption to defend the statistics they devise against eavesdropping and malicious adjustments. however, legacy encryption protocols (like WEP) are prone to attack, or maybe comfy protocols can be cracked using brute-strain and dictionary-primarily based assaults. numerous unique gear exist for cracking the passwords securing wireless networks.

five. Aircrack-ng
Aircrack-ng is a famous wi-fi password-cracking tool. It starts offevolved through way of capturing wi-fi community packets, then tries to crack the community password by reading them. Aircrack-ng supports FMS, PTW, Korek and distinctive attacks toward WEP passwords. Aircrack-ng can also use dictionary attacks to bet passwords for WPA, WPA2 and WPA3 wireless networks net App Hacking: internet utility technology,.

Aircrack-ng is a terminal-primarily based utility. but, numerous tutorials are to be had to illustrate how to use the tool.

download: http://www.aircrack-ng.org/

6. CoWPAtty
CoWPAtty is a password-cracking device that makes use of dictionary assaults to crack WPA pre-shared passwords. It enables Linux and operates the usage of a command-line interface net App Hacking: internet utility technology,.

CoWPAtty has a wordlist containing masses of passwords, however dictionary assaults with the tool can be gradual. this is because the password hash for WPA is primarily based mostly on the wi-fi community’s SSID. CoWPAtty must calculate the hash for each password in its listing earlier than sorting out, which takes time.

For wireless networks with in reality one among approximately 1,000 of the most commonplace and default SSIDs, CoWPAtty gives a rainbow table of 172,000 password hashes. If a specific wireless community uses the type of SSIDs and has a password within the list, then CoWPAtty can crack it masses extra brief net App Hacking: internet utility technology,.

down load CoWPAtty: http://sourceforge.internet/projects/cowpatty/

7. Reaver
Reaver is an open-supply password-cracking tool. It performs a brute-pressure assault towards WPS to interrupt the safety of wi-fi networks.

download Reaver: https://code.google.com/p/reaver-wps/downloads/list

8. Wifite
Wifite is a device designed to simplify the wi-fi auditing approach. It runs modern-day gadget as a way to dispose of the want to memorize command-line switches and a way to configure severa system. To look at more about the usage of wifite, examine the wifite walkthrough net App Hacking: internet utility technology,.

download Wifite: https://github.com/derv82/wifite2

9. WepDecrypt
WepDecrypt is a wireless LAN device written inside the interval. It makes use of dictionary attacks, dispensed network assaults and different techniques to bet WEP Keys.

WepDecrypt calls for installing some libraries and making the binaries executable. because of this, the tool won’t be an awesome desire for novice users.

down load here: http://wepdecrypt.sourceforge.internet/wepdecrypt-manual.html

10. CloudCracker
CloudCracker leverages cloud-primarily based completely resources to crack WPA keys and different sorts of password hashes. It takes the handshake document and the community call as input and plays the password cracking net App Hacking: internet utility technology,.

CloudCracker has a huge password dictionary, giving it a excessive possibility of cracking susceptible passwords. The charge of cracking a hash is based upon at the favored precedence.

See CloudCracker: https://crack.sh/

eleven. Pyrit

status Codes

each HTTP reaction ought to contain a standing-code indicating the the end result of the request.

There are 5 groups of repute codes based totally upon the primary digit of the code

* 1xx – Informational

* 2xx – achievement

* 3xx – Redirectnet App Hacking: internet utility technology,

* 4xx – errors

* 5xx – Server encountered an errors net App Hacking: internet utility technology,

The repute codes you are most likely to come upon are;

* a hundred – hold

* 200 – adequate

* 201 – Created

* 301 – Moved permanently net App Hacking: internet utility technology,

* 302 – found

* 304 – no longer modified net App Hacking: internet utility technology,

* 400 – horrific Request net App Hacking: internet utility technology,

* 401 – Unauthorized net App Hacking: internet utility technology,

* 403 – Forbidden net App Hacking: internet utility technology,

* 404 – now not found net App Hacking: internet utility technology,

* 405 – method not Allowed net App Hacking: internet utility technology,

* 413 – Request Entity Too massive

* 414 – Request URI Too lengthy

* 500 – internal Server blunders

* 503 – carrier Unavailable net App Hacking: internet utility technology,

to look a complete listing of all of the response codes, see the list beneath.

HTTPS

The HTTP protocol is transmitted in simple TCP this means that it is unencrypted and liable to MitM assaults and other such attacks by an attacker positioned between the patron and server. HTTPS is basically similar to HTTP however rather is tunneled the use of relaxed Sockets Layer (SSL). in this way, the confidentiality and integrity of the statistics is covered net App Hacking: internet utility technology,.

HTTP Proxies net App Hacking: internet utility technology,

An HTTP proxy is a server between the patron’s browser and the web server. whilst the customers browser is configured to use the HTTP proxy, all requests to the internet have to go first to the proxy. The proxy then forwards the request and gets the reaction earlier than forwarding the the customer. in this way, the HTTP proxy can offer get right of entry to manage, caching, authentication and content material filtering net App Hacking: internet utility technology, .

HTTP Authentication

The HTTP protocol has its very own mechanisms for authenticating customers. those encompass;

fundamental: sends user credentials as Base64-encoded string in request header net App Hacking: internet utility technology,

NTLM: undertaking reaction mechanism

Digest: assignment reaction and makes use of MD5 test sums of a nonce with users credentials

In web App Hacking, web technologies, element 2, we are able to examine a number of the net functionality technologies that that permit websites to deliver such wealthy, dynamic reviews to the modern web sites which include AJAX, JSON, HTML5 and the content material management structures that put into effect them net App Hacking: internet utility technology,.

Sources