JSESSIONID: Java ASPSESSIONID: IIS server ASP.NET ASP.NET_SessionId: PHPSESSIS: PHP Identify server-side functionality Page source and URLs are examined and an educated guess is made in order to determine the internal structure and functionality of Web applications. Tools such as Wget, Teleport Pro, and BlackWidow are used to identify server-side functionality. Attack authentication mechanism Design and implementation flaws in Web applications can be exploited by attackers to bypass authentication mechanisms. A failure to check password strength or insecure transportation of credentials can exploit design and implementation flaws in Web applications. Username enumeration The trial-and-error method can be used to guess the users of the application if login error states the part of the username and password that is incorrect. There are some applications that automatically produce account usernames depending on a sequence such as username211, username212, username213, etc. and attackers can find the sequence and enumerate valid usernames. Password attacks Password changing: Spider the application or create a login account to determine password change functionality within the application. In order to identify vulnerabilities in password change functionality, try random strings for "Old Password", "New Password", and "Confirm the New Password" fields and analyze errors. Password recovery: For password recovery, an attacker can use social engineering to guess the password if the number of attempts is not limited. Applications may also send a unique recovery URL or existing password to email the address specified by the attacker. "Remember Me" exploit: A simple persistent cookie, such as RememberUser=mark or a persistent session identifier, such as RememberUser=ABY15982010 can be used to implement "Remember Me" functions. Attackers can bypass the authentication mechanism by using an enumerated username or predicting the session identifier. In password guessing, attackers use most commonly used passwords, footprinting target, and social engineering techniques to create a list of possible passwords, and try each password until the correct password is found. Attackers can use tools such as Dictionary Maker to create dictionary of all possible passwords. This helps them to perform dictionary attacks. Password guessing can be carried out manually or using automated tools such as WebCracker, Brutus, Burp Insider, and THC-Hydra, etc.
JSESSIONID: Java ASPSESSIONID: IIS server ASP.NET_SessionId: ASP.NET PHPSESSIS: PHP Identify server-side functionality Page source and URLs are examined and an educated guess is made in order to determine the internal structure and functionality of Web applications. Tools such as Wget, Teleport Pro, and BlackWidow are used to identify server-side functionality. Attack authentication mechanism Design and implementation flaws in Web applications can be exploited by attackers to bypass authentication mechanisms. A failure to check password strength or insecure transportation of credentials can exploit design and implementation flaws in Web applications. Username enumeration The trial-and-error method can be used to guess the users of the application if login error states the part of the username and password that is incorrect. There are some applications that automatically produce account usernames depending on a sequence such as username211, username212, username213, etc. and attackers can find the sequence and enumerate valid usernames. Password attacks Password changing: Spider the application or create a login account to determine password change functionality within the application. In order to identify vulnerabilities in password change functionality, try random strings for "Old Password", "New Password", and "Confirm the New Password" fields and analyze errors. Password recovery: For password recovery, an attacker can use social engineering to guess the password if the number of attempts is not limited. Applications may also send a unique recovery URL or existing password to email the address specified by the attacker. "Remember Me" exploit: A simple persistent cookie, such as RememberUser=mark or a persistent session identifier, such as RememberUser=ABY15982010 can be used to implement "Remember Me" functions. Attackers can bypass the authentication mechanism by using an enumerated username or predicting the session identifier. In password guessing, attackers use most commonly used passwords, footprinting target, and social engineering techniques to create a list of possible passwords, and try each password until the correct password is found. Attackers can use tools such as Dictionary Maker to create dictionary of all possible passwords. This helps them to perform dictionary attacks. Password guessing can be carried out manually or using automated tools such as WebCracker, Brutus, Burp Insider, and THC-Hydra, etc.
Hacking%20Web%20Applications.docx