Hacking Web Servers

Question 1

What is Web Server Misconfiguration?

Answer 1

Web server misconfiguration refers to the configuration weaknesses in web infrastructure that can be exploited to launch various attacks on web servers, such as directory traversal, server intrusion, and data theft

Question 2

What is a Web Cache Poisoning Attack?

Answer 2

Web cache poisoning damages the reliability of an intermediate web cache source. In this attack, an attacker swaps cached content for a random URL with infected content. Users of the web cache source may unknowingly use the poisoned content instead of the true and secured content when requesting the required URL through the web cache

Question 3

What is a Server-Side Request Forgery (SSRF) Attack?

Answer 3

Attackers exploit server-side request forgery (SSRF) vulnerabilities, which evolve from the unsafe use of functions in an application, in public web servers to send crafted requests to the internal or backend servers. Internal servers are usually implemented by firewalls to prevent the network from unwanted traffic inflows

Question 4

What is Website Defacement?

Answer 4

Website defacement refers to the unauthorized changes made to the contents of a single webpage or an entire website, resulting in changes to the visual appearance of the website or a webpage. Hackers break into webservers and alter the hosted websites by injecting code in order to add images, popups, or text to a page in such a way that the visual appearance of the page changes. In some cases, the attackers may replace the entire website instead of just changing single pages

Question 5

What is parameter/form tampering?

Answer 5

In a parameter/form tampering attack, the attacker manipulates the parameters exchanged between the client and server to modify application data, such as user credentials and permissions as well as price and quantity of products

Question 6

What is Open Sez Me?

Answer 6

Open Sez Me is a lookup database for default passwords, credentials, and ports

Question 7

What is Open Sez Me?

Answer 7

Open Sez Me is a lookup database for default passwords, credentials, and ports

Question 8

What is NCollector Studio?

Answer 8

NCollector Studio is a website mirroring tool used to download content from the web to a local computer. This tool enables users to crawl for specific file types, mak1e any website available for offline browsing, or simply download a website to a local computer

Question 9

What is Nikto2?

Answer 9

Nikto is a vulnerability scanner used extensively to identify potential vulnerabilities in web applications and web servers

Question 10

Which nmap command does an attacker use to enumerate common web applications?

Answer 10

nmap –script http-enum -p80

Question 11

In Metasploit, what is a single?

Answer 11

A single is a self-contained and completely standalone exploit

Question 12

In Metasploit, what is a stager payload?

Answer 12

Stager payloads work in conjunction with stage payloads in order to perform a specific task. A stager establishes a communication channel between the attacker and the victim and reads in a stage payload to execute on the remote host

Question 13

In Metasploit, what is a stage?

Answer 13

Stages are downloaded by stager modules

Question 14

Which nmap command does an attacker use to detect HTTP trace?

Answer 14

nmap -p80 –script http-trace

Question 15

Which technique defends servers against blind response forgery

Answer 15

UDP source port randomization

Question 16

What is N-Stalker?

Answer 16

N-Stalker is a web application security scanner that searches for vulnerabilities to attacks such as clickjacking, SQL injection, and XSS. It allows spider crawling throughout the application and the creation of web macros for form authentication. It also provides proxy capabilities for “drive-thru” attacks and identifies components through reverse proxies that distribute different platforms in the same application URL

Question 17

What is mimikatz?

Answer 17

Mimikatz allows attackers to pass Kerberos TGT to other computers and sign in using the victim’s ticket. The tool also helps in extracting plaintext passwords, hashes, PIN codes, and Kerberos tickets from memory