The Gamer's Arena

Add New Exploits to Metasploit from Explooit-db - Pentesters Area

Akif

Link Author

Title: Add New Exploits to Metasploit from Explooit-db - Pentesters Area
Author: Akif
Rating 5 of 5 Des:

All this time you were jus...

</div>
<div class="fauxborder-left">

</div>
</div>
</div>
<div class="content-fauxcolumns">
<div class="fauxcolumn-outer content-fauxcolumn-outer">
<div class="cap-top">

</div>
<div class="fauxborder-left">

</div>
</div>
</div>
<div class="content-cap-top cap-top">

</div>
<div class="tabs-outer">
<div class="tabs-cap-top cap-top">

</div>
<div class="fauxborder-left tabs-fauxborder-left">

</div>
</div>
<div class="tabs-cap-bottom cap-bottom">

</div>
</div>
<div class="main-cap-top cap-top">

</div>
<div class="fauxcolumn-outer fauxcolumn-center-outer">
<div class="cap-top">

</div>
<div class="fauxborder-left">

</div>
</div>
<div class="fauxcolumn-outer fauxcolumn-left-outer">
<div class="cap-top">

</div>
<div class="fauxborder-left">

</div>
</div>
<div class="fauxcolumn-outer fauxcolumn-right-outer">
<div class="cap-top">

</div>
<div class="fauxborder-left">

</div>
</div>
<a href="https://www.blogger.com/null" name="2732471803680295996"></a>

</div>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCqo9E4k4n3e2N8mLErt-ovnWxntZAMonbQQTMyOExv00QlZLqi8UMysH-RmdLK-SikMKTrAu5Faab2b7Z1Djqd-qsxjJ8ql07a11h4i-ubSdhsA0in4pvgWiRqLGgzUDrZAuvkUPm3uao/s1600/exploit-db.png" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="219" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCqo9E4k4n3e2N8mLErt-ovnWxntZAMonbQQTMyOExv00QlZLqi8UMysH-RmdLK-SikMKTrAu5Faab2b7Z1Djqd-qsxjJ8ql07a11h4i-ubSdhsA0in4pvgWiRqLGgzUDrZAuvkUPm3uao/s1600/exploit-db.png" width="320" /></a>All
 this time you were just using mainstream exploits which were famous but
 old. They worked well, but only with old unpatched operating systems, 
not the updated ones. Now it's time to move on to the next step. Our 
poor experience against Windows 8 and Java 7u60 left us shattered, and 
we realized that fully patched and updated machines with strong 
antivirus and firewall can be pretty  hard to break into. Now we will 
move into the world of real pentesting, and the first step would be 
introduction to exploit-db.<br />
<br />
<br />
<a href="https://www.blogger.com/null" name="more"></a><br /><br />
(If you don't want the theory and just want to know how to use the exploits, keep scrolling till you see <b>bold </b>text, some of which is in <span style="color: red;">red </span>and/or <span style="color: blue;">blue</span>. Just keep using those commands and you'll be done or <a href="https://www.blogger.com/blogger.g?blogID=1987100455892845792#real_code">click here to skip to that part)</a><br />
<br />
<h2>
Exploit-db</h2>
As usual, a few official words from the developers before I express my personal views.<br />
<br />
<blockquote class="tr_bq">
<div style="text-align: justify;">
<a class="external external_icon" href="http://www.exploit-db.com/" target="_blank" title="The Exploit Database">The Exploit Database</a>
 is the ultimate archive of public exploits and corresponding vulnerable
  software, developed for use by penetration testers and vulnerability  
researchers. Its aim is to serve as the most comprehensive collection of
  exploits gathered through direct submissions, mailing lists, and other
  public sources, and present them in a freely-available and  
easy-to-navigate database. The Exploit Database is a repository for  
exploits and proof-of-concepts rather than advisories, making it a  
valuable resource for those who need actionable data right away. 
(offensive security)</div>
</blockquote>
Some more<br />
<blockquote class="tr_bq">
<div style="text-align: justify;">
The Exploit Database is a <a class="external external_icon" href="http://cve.mitre.org/compatible/compatible.html#o" target="_blank" title="Exploit Database CVE Compatible">CVE-Compatible</a>
 Database and (where applicable) CVE numbers are assigned to the  
individual exploit entries in the database. The public database archive 
 does not contain the mapped CVE numbers, but we make them available to 
 our partnering organizations, making links to The Exploit Database  
entries available within their products.</div>
<div style="text-align: justify;">
As many exploit developers lament, it is  frequently more difficult to 
locate a vulnerable application than it is  to take a public proof of 
concept and change it into a working exploit.  For this reason, The 
Exploit Database also hosts the vulnerable  application versions 
whenever possible.</div>
<div style="text-align: justify;">
In addition, the team of volunteers that  maintain the site also make 
every effort to verify the submitted  exploits and a visual indicator is
 provided whether or not a successful  verification was performed. 
(Offensive Security)</div>
</blockquote>
<br />
Now, what exploit db really is, is nothing more than a database where 
the pentestors who write an exploit for a vulnerability upload the 
source code of the exploit of other pentestors too see. It is maintained
 by Offensive Security (the force behind Backtrack, Kali, Metasploit 
Unleashed). The exploit-db.com site itself is pretty easy to navigate, 
and you can find all sorts of exploits there. Just finding an exploit, 
however, is not enough, as you need to add it to Metasploit in order to 
use it. <br />
<br />
<h2>
Adobe Flash Player Shader Buffer Overflow</h2>
<br />
<section class="marB40"><blockquote class="tr_bq">
This module exploits a buffer overflow vulnerability in Adobe Flash 
Player. The         vulnerability occurs in the flash.Display.Shader 
class, when setting specially         crafted data as its bytecode, as 
exploited in the wild in April 2014. This module         has been tested
 successfully on IE 6 to IE 11 with Flash 11, Flash 12 and Flash 13     
    over Windows XP SP3, Windows 7 SP1 and Windows 8. (rapid7)</blockquote>
Now the site suggest that the exploit can be found here.<br /><blockquote class="tr_bq">
exploit/windows/browser/adobe_flash_pixel_bender_bof</blockquote>
But using the command<br /><blockquote class="tr_bq">
use exploit/windows/browser/adobe_flash_pixel_bender_bof</blockquote>
shows that the exploit is not in Metasploit yet (chances are good it's 
there if you update metasploit regularly or if you are reading this 
tutorial a long time after it was written. Either ways, the method will 
not differ even if the exploit is already there, so don't worry. Also 
you can use a different exploit as per your liking, and just replace the
 name wherever you see it being used in commands)<br /><br />Now, there are two alternates. <b>First, update the metasploit framework</b> using </section><br />
<blockquote class="tr_bq">
<b>msfupdate</b></blockquote>
This will update the framework with new modules.<br />
<br />
The second alternate the to <b>download the exploit from exploit-db</b>, then put it in the <b>~/.msf4/modules/exploit/<your_folder></b> directory. Any exploit put here will be detected my Metasploit when it starts. It will show up when you type <b>use /exploit/your_folder/exploit_name</b>.
 An important point here is while the <your_folder is arbitrary  and 
can be set to any value, it is recommended to use a proper directory 
structure. For example, this exploit should be placed in<b> ~/.msf4/modules/exploit/windows/browser/ directory .</b>Also, it is mandatory to place exploits in a subdirectory of <b>~/.msf4/modules/exploit/</b> or you won't be able to use it. For newbies in Linux, here is a detailed step by step guide.<br />
<br />
<h2>
Get the exploit</h2>
<div>
For examples sake, we'll use the adobe shader exploit 
from http://www.exploit-db.com/exploits/33333/ Click on the Save icon to
 download the exploit. Save it on you Kali Desktop.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4izD28SuPrnWYrFgvgi4dT07mZtfCTnoBCXTLfDrwoSNEeiPuftKdgdva26ZQliqIiMTJQC5wn5xRmPgxJ73q4CmjlrWqqiyGD_QJoP4tIPnjUPXE14QbYdWWx7MsAwISfw8_kpTG0Lb5/s1600/abobe-flash-player.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="110" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4izD28SuPrnWYrFgvgi4dT07mZtfCTnoBCXTLfDrwoSNEeiPuftKdgdva26ZQliqIiMTJQC5wn5xRmPgxJ73q4CmjlrWqqiyGD_QJoP4tIPnjUPXE14QbYdWWx7MsAwISfw8_kpTG0Lb5/s1600/abobe-flash-player.png" width="320" /></a></div>
<div>
</div>
<h2>
.msf4 directory method</h2>
Now if you are not well versed with linux, you will need help with 
creating the directory and placing files there. Although I'm guiding you
 how to do it, you should be proficient in linux usage and should be 
able to do the basic stuff like this atleast. So, you can either use the
 command to line create the directories or do it using the GUI.<br />
<h3>
Command line method</h3>
<div>
First, say hi to mkdir</div>
mkdir --help<br />
Usage: mkdir [OPTION]... DIRECTORY...<br />
Create the DIRECTORY(ies), if they do not already exist.<br />
<br />
Mandatory arguments to long options are mandatory for short options too.<br />
  -m, --mode=MODE   set file mode (as in chmod), not a=rwx - umask<br />
  -p, --parents     no error if existing, make parent directories as needed<br />
  -v, --verbose     print a message for each created directory<br />
  -Z, --context=CTX  set the SELinux security context of each created<br />
                      directory to CTX<br />
      --help     display this help and exit<br />
      --version  output version information and exit<br />
<div>
</div>
First we'll move to the already existent directory using (you need to be in root directory for this to work. Type just <b>cd </b>if unsure, it will automatically take you to root directory)<b><span style="color: red;">root@kali:</span>~# cd .msf4/modules/    </b><br />
To see what the directory has, execute ls. It will return nothing as the directory is empty.<br />
<div id="real_code">
<div>
<b><span style="color: red;">root@kali:</span>~<span style="color: blue;">/.msf4/modules</span># ls</b></div>
</div>
<div>
Now we'll use mkdir to create what we need.</div>
<div>
<div>
<b><span style="color: red;">root@kali:</span><span style="color: blue;">~/.msf4/modules</span># mkdir exploits</b></div>
<div>
<b><span style="color: red;">root@kali:</span><span style="color: blue;">~/.msf4/modules</span># cd exploits</b></div>
</div>
<div>
<div>
<b><span style="color: red;">root@kali:</span><span style="color: blue;">~/.msf4/modules/exploits</span># mkdir windows        </b></div>
<div>
<b><span style="color: red;">root@kali:</span><span style="color: blue;">~/.msf4/modules/exploits</span># cd windows</b></div>
<div>
<b><span style="color: red;">root@kali:</span><span style="color: blue;">~/.msf4/modules/exploits/windows</span># mkdir browser</b></div>
<div>
<b><span style="color: red;">root@kali:</span><span style="color: blue;">~/.msf4/modules/exploits/windows</span># cp      </b></div>
</div>
<div>
</div>
<div>
If you read the mkdir help thing, you might have noticed the -p option. 
It makes everything much easier. Everything above can be achieved with 
something as simple as </div>
<div>
<div>
<b><span style="color: red;">root@kali:</span><span style="color: blue;">~</span># mkdir -p ~/.msf4/modules/exploits/windows/browser</b></div>
</div>
<div>
</div>
<div>
Now meet cp</div>
<div>
<div>
root@kali:~/.msf4/modules/exploits/windows# cp --help</div>
<div>
Usage: cp [OPTION]... [-T] SOURCE DEST</div>
<div>
  or:  cp [OPTION]... SOURCE... DIRECTORY</div>
<div>
  or:  cp [OPTION]... -t DIRECTORY SOURCE...</div>
<div>
Copy SOURCE to DEST, or multiple SOURCE(s) to DIRECTORY.</div>
</div>
<div>
Assume you have adobe_flash_pixel_bender_bof.rb file on your desktop. Then use the following commands.</div>
<div>
<div>
root@kali:~/Desktop# cp adobe_flash_pixel_bender_bof.rb ~/.msf4/modules/exploits/windows</div>
</div>
<div>
</div>
<div>
<div>
<b><span style="color: red;">root@kali</span>:~# ls </b></div>
<div>
<b>Desktop  app.apk</b></div>
<div>
<b><span style="color: red;">root@kali</span>:~# cd Desktop</b></div>
</div>
<div>
<div>
<b><span style="color: red;">root@kali:</span><span style="color: blue;">~/Desktop</span># cp adobe_flash_pixel_bender_bof.rb ~/.msf4/modules/exploits/windows/browser</b></div>
</div>
<div>
<b>Now check for yourself</b></div>
<div>
<div>
<b><span style="color: red;">root@kali:</span>~# cd ~/.msf4/modules/exploits/windows/browser</b></div>
<div>
<b><span style="color: red;">root@kali:</span>~/<span style="color: red;">.</span><span style="color: blue;">msf4/modules/exploits/windows/browser</span># ls</b></div>
</div>
<div>
<b>adobe_flash_pixel_bender_bof.rb</b></div>
<div>
</div>
<h3>
GUI Method</h3>
<div>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaSK_rrkZL10glV42ifV7X8-pk0mMZBPAoUHByInDzhTMI4JbwQwzSbkcN_VvVR5HupKAHY0crj8C0ug3_9zSkFN61cVyOLxIUx_AbeLyWVvaPm_34jjl-9NA_-_9QGoljg021vVHrOmnz/s1600/hidden.PNG" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="150" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaSK_rrkZL10glV42ifV7X8-pk0mMZBPAoUHByInDzhTMI4JbwQwzSbkcN_VvVR5HupKAHY0crj8C0ug3_9zSkFN61cVyOLxIUx_AbeLyWVvaPm_34jjl-9NA_-_9QGoljg021vVHrOmnz/s1600/hidden.PNG" width="320" /></a>Go
 to computer -> Filesystem->Home. Now you won't see .msf4 there, 
because the . prefix is for hidden files. So go to view and select show 
hidden items. Now it will be visible.</div>
<div>
</div>
<div>
</div>
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYAKOfgT3XgKa_qvtf4G9LauoG5b-UN8-PrHJ_oiA2ho-rfiyyYHCicqVPDNM7QnhLz6tKTCqL5zrGiX1ET5ABUsMphrWcqWGfwIA85FirQNFNyi2h6nLGaD78r72q5_Kz6enzwDD44bUJ/s1600/msf4gui.PNG" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="198" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYAKOfgT3XgKa_qvtf4G9LauoG5b-UN8-PrHJ_oiA2ho-rfiyyYHCicqVPDNM7QnhLz6tKTCqL5zrGiX1ET5ABUsMphrWcqWGfwIA85FirQNFNyi2h6nLGaD78r72q5_Kz6enzwDD44bUJ/s1600/msf4gui.PNG" width="320" /></a><br />
<br />
<br />
<br />
Now the rest is going to be a piece of cake. Copy the exploit from 
desktop, and create the directories by using the easy peasy right click 
-> New folder method. After that just paste the file where it needs 
to be. You'll be done. Now start msfconsole again or type <b>reload_all</b> to reload the module. This will add the module to metasploit and you can use it as you normally would.

Add New Exploits to Metasploit from Explooit-db - Pentesters Area

All this time you were jus...

12 Secret Facebook Features Every Marketer Should Use - Pentesters Area

The-HackerS

Link Author

Title: 12 Secret Facebook Features Every Marketer Should Use - Pentesters Area
Author: The-HackerS
Rating 5 of 5 Des:

Do you THINK you’ve mastered every aspect of marketing on Facebook? Think again! Believe it or not, Facebook has many secret features ...

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNOB9YedVNvxVIBfqH7ty9DN7elxWWhAJ39IExaS89AdH2kZHbeLB6XH0KsJA_QjnmbHDFrd2BIN3dQ_zEqe7qeE5oLM59GaovLIVPYvSd2_vxu765SxAZSYR_2ufg4FD6dMIg0wnvSbiB/s1600/12_secret_facebook_features_every_marketer_should_be_using-1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="336" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNOB9YedVNvxVIBfqH7ty9DN7elxWWhAJ39IExaS89AdH2kZHbeLB6XH0KsJA_QjnmbHDFrd2BIN3dQ_zEqe7qeE5oLM59GaovLIVPYvSd2_vxu765SxAZSYR_2ufg4FD6dMIg0wnvSbiB/s640/12_secret_facebook_features_every_marketer_should_be_using-1.jpg" width="640" /></a></div>
<br />
<span class="hs_cos_wrapper hs_cos_wrapper_meta_field hs_cos_wrapper_type_rich_text" data-hs-cos-general-type="meta_field" data-hs-cos-type="rich_text" id="hs_cos_wrapper_post_body">Do you THINK you’ve mastered every aspect of marketing on Facebook?
</span><br />
Think again!<br />

Believe it or not, Facebook has many secret features you've probably 
yet to utilize. In fact, my guess is you don’t even know they exist!<br />

But here’s the good news: Your competition doesn’t either.<br />

You see, they’re only 'secret' because the majority of marketers haven’t invested the time to learn about them.<br />

And that’s where the good news gets even better.<br />

Let me explain...<br />

<div style="text-align: center;">
>> <a href="http://ctt.ec/2cfMa" rel="nofollow" target="_blank">Click to Tweet</a> <<</div>
<h2>
12 Secret Facebook Features Every Marketer Should Be Using [Infographic]</h2>
While your competition is still stumbling along, trying to reach their audience, you can tap into a gold mine of functionality.<br />

Oh sure, a lot of marketers are grumbling over the 'death' of Facebook, but you’re not one of those.<br />

You know that a <a href="http://www.postplanner.com/bite-sized-fb-tips-to-improve-facebook-strategy/" rel="nofollow" target="_blank">targeted Facebook strategy</a>
 (when paired with an in-depth working knowledge of the platform) earns 
you more engagement, more leads and ultimately -- more money.<br />

<h3>
You can tap into Facebook hidden features</h3>
That’s why Post Planner created an infographic to help you master hidden Facebook features.<br />

The info you’ll find here will help minimize the time you spend 
fumbling around to find what works on Facebook and give you more time to
 implement what does!<br />

<h3>
With this Infographic, you’ll learn how to get ahead of the competition:</h3>
<ul>
<li>
Discover relevant content you can rehash and reuse for your Facebook page<br />

</li>
<li>
Leverage Interest Lists to stay up-to-date and organized<br />

</li>
<li>
Monitor your competitors' top posts and grab a sneak peek into how 
they’re using visual marketing to connect with their audiences<br />

</li>
<li>
See all of your Facebook Page fans in one location to communicate, nurture and deepen relationships<br />

</li>
<li>
Boost ROI by making sure your ads are delivered to the appropriate audience<br />

</li>
<li>
And 7 more Facebook features you can implement right away!<br />

</li>
</ul>
<h2>
12 Secret Facebook Features Every Marketer Should Be Using -- Download Here</h2>
<h3>
Download your copy today!</h3>
Are you ready to tap into 12 secret Facebook features designed to help you <a href="http://www.postplanner.com/12-facebook-tips-and-tricks-for-running-successful-fan-page/" target="_blank">better manage</a>, monitor and grow your presence?<br />

If your answer is “Yes!” then it’s time to break out of the mold and go PRO with these hidden features!<br />

T<span>hese tips work. Guaranteed.</span><br />

If you don't have time to dig in right now... no worries. Press the 
orange "GET IT NOW" button and save the infographic on your desktop or 
in your "Must Read" file.<br />

Just be sure you get this eye-opening resource NOW -- while it's available... FREE!<br />

12 Secret Facebook Features Every Marketer Should Use - Pentesters Area

Do you THINK you’ve mastered every aspect of marketing on Facebook? Think again! Believe it or not, Facebook has many secret features ...

PHP .PDF Programming Guide Book Download - Pentesters Area

Akif

Link Author

Title: PHP .PDF Programming Guide Book Download - Pentesters Area
Author: Akif
Rating 5 of 5 Des:

Download free PHP programming language for dynamic web course material and training. In this book you can find basic course of PHP p...

<div class="td-post-sharing td-post-sharing-top td-with-like">
</div>
<div class="td-post-featured-image">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguEQMCpzJkwNjQiQskpGCUGm4fZPwIepjA1BL15ZTp653ROrndURChYPEXCLTeWV_3f3ZvJSyc26y8EMmulUCVmqb1tnSX9-1_eCTnUeWvVpoTUa3KqHP_GYeJDXZe7Cds3Fq4ha7KZp1v/s1600/code_php_desktop_1280x800_hd-wallpaper-729589-696x435.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguEQMCpzJkwNjQiQskpGCUGm4fZPwIepjA1BL15ZTp653ROrndURChYPEXCLTeWV_3f3ZvJSyc26y8EMmulUCVmqb1tnSX9-1_eCTnUeWvVpoTUa3KqHP_GYeJDXZe7Cds3Fq4ha7KZp1v/s640/code_php_desktop_1280x800_hd-wallpaper-729589-696x435.png" width="640" /></a></div>
<br />
Download free PHP programming language for dynamic web course material and training.<br />
In this book you can find basic course of PHP programming. This book is especially for starters<br />
<b>Contents:</b><br />
<div style="float: none; margin: 10px 0 10px 0; text-align: center;">
<ins class="adsbygoogle" data-ad-client="ca-pub-4560402847031305" data-ad-slot="1210071416" data-adsbygoogle-status="done" style="display: inline-block; height: 90px; width: 728px;"><ins id="aswift_0_expand" style="background-color: transparent; border: none; display: inline-table; height: 90px; margin: 0; padding: 0; position: relative; visibility: visible; width: 728px;"><ins id="aswift_0_anchor" style="background-color: transparent; border: none; display: block; height: 90px; margin: 0; padding: 0; position: relative; visibility: visible; width: 728px;"></ins></ins></ins></div>
<ul>
<li>What is PHP?</li>
<li>Setup and Installation
<ul>
<li>Installation on Linux</li>
<li>Installation on Windows</li>
<li>Installation on Mac OS X</li>
</ul>
</li>
<li>Beginning with “Hello World!”</li>
<li>Basics</li>
<li>Commenting and Style</li>
<li>Arrays</li>
<li>Control structures</li>
<li>The if Structure</li>
<li>The switch Structure</li>
<li>The while Loop</li>
<li>The do while Loop</li>
<li>The for Loop</li>
<li>The foreach Loop</li>
<li>Functions, Files, Mailing</li>
<li>Cookies, Sessions</li>
<li>Databases, MySQL, PostgreSQL</li>
<li>PHP Data Objects</li>
<li>Integration Methods (HTML Forms, etc.)</li>
</ul>
<b>Description:</b> PHP programming language for dynamic web course material and training<br />
<b>File size:</b> 267.46 KB<br />
<b>File type:</b> PDF<br />
<b>Download:<a href="https://latesthackingnews.com/downloads/php_programming.pdf" target="_blank"> PHP Programming Book.PDF</a></b>

PHP .PDF Programming Guide Book Download - Pentesters Area

Download free PHP programming language for dynamic web course material and training. In this book you can find basic course of PHP p...

Penetration Testing Complete Guide , With Sample Test Cases - Pentesters Area

Akif

Link Author

Title: Penetration Testing Complete Guide , With Sample Test Cases - Pentesters Area
Author: Akif
Rating 5 of 5 Des:

What is Penetration Testing? It’s the process to identify security vulnerabilities in an application by evaluating the system or network...

<br />
<b>What is Penetration Testing?</b><br />
<br />
It’s the process to identify security vulnerabilities in an application 
by evaluating the system or network with various malicious techniques. 
Purpose of this test is to secure important data from outsiders like 
hackers who can have unauthorized access to system. Once vulnerability 
is identified it is used to exploit system in order to gain access to 
sensitive information.<br />
<b>Causes of vulnerabilities:</b><br />
– Design and development errors<br />
– Poor system configuration<br />
– Human errors<br />
<h3>
Why Penetration testing?</h3>
– Financial data must be secured while transferring between different systems<br />
– Many clients are asking for pen testing as part of the software release <span id="more-1016"></span>cycle<br />
– To secure user data<br />
– To find security vulnerabilities in an application<br />
<br />
<br />
<a href="http://cdn2.softwaretestinghelp.com/wp-content/qa/uploads/2012/06/Penetration-testing.jpg"><img alt="Penetration testing" class="alignnone  wp-image-1019" height="256" src="http://cdn2.softwaretestinghelp.com/wp-content/qa/uploads/2012/06/Penetration-testing.jpg" title="Penetration testing" width="381" /></a><br />
<br />
It’s very important for any organization to identify security issues 
present in internal network and computers. Using this information 
organization can plan defense against any hacking attempt. User privacy 
and data security are the biggest concerns nowadays. Imagine if any 
hacker manage to get user details of social networking site like 
Facebook. Organization can face legal issues due to a small loophole 
left in a software system. Hence big organizations are looking for PCI 
compliance certifications before doing any business with third party 
clients.<br />
What should be tested?<br />
– Software<br />
– Hardware<br />
– Network<br />
– Process<br />
<h3>
Penetration Testing Types:</h3>
<b>1) Social Engineering:</b> Human errors are the main 
causes of security vulnerability. Security standards and policies should
 be followed by all staff members to avoid social engineering 
penetration attempt. Example of these standards include not to mention 
any sensitive information in email or phone communication. Security 
audits can be conducted to identify and correct process flaws.<br />
<b>2) Application Security Testing:</b> Using software methods one can verify if the system is exposed to security vulnerabilities.<br />
<b>3) Physical Penetration Test:</b> Strong physical 
security methods are applied to protect sensitive data. This is 
generally useful in military and government facilities. All physical 
network devices and access points are tested for possibilities of any 
security breach.<br />
Pen Testing Techniques:<br />
1) Manual penetration test<br />
2) Using automated penetration test tools<br />
3) Combination of both manual and automated process<br />
The third process is more common to identify all kinds of vulnerabilities.<br />
<h3>
Penetration Testing Tools:</h3>
Automated tools can be used to identify some standard vulnerability 
present in an application. Pentest tools scan code to check if there is 
malicious code present which can lead to potential security breach. 
Pentest tools can verify security loopholes present in the system like 
data encryption techniques and hard coded values like username and 
password.<br />
<b>Criteria to select the best penetration tool:</b><br />
– It should be easy to deploy, configure and use.<br />
– It should scan your system easily.<br />
– It should categorize vulnerabilities based on severity that needs immediate fix.<br />
– It should be able to automate verification of vulnerabilities.<br />
– It should re-verify exploits found previously.<br />
– It should generate detailed vulnerability reports and logs.<br />
Once you know what tests you need to perform you can either train 
your internal test resources or hire expert consultants to do the 
penetration task for you.<br />
<b>Examples of Free and Commercial Tools</b> –<br />
<a href="http://nmap.org/" target="_blank" title="Nmap">Nmap</a>, <a href="http://www.nessus.org/" target="_blank" title="NESSUS">Nessus</a>, <a href="http://www.metasploit.com/" target="_blank" title="Metasploit">Metasploit</a>, <a href="http://www.wireshark.org/" target="_blank" title="Wireshark">Wireshark</a>, <a href="http://www.openssl.org/" target="_blank" title="OpenSSL">OpenSSL</a>, <a href="http://www.oxid.it/cain.html" target="_blank" title="Cain & Abel">Cain & Abel</a>, THC Hydra, <a href="http://w3af.sourceforge.net/" target="_blank" title="w3af">w3af</a><br />
Commercial services: <a href="http://www.purehacking.com/" target="_blank" title="Pure hacking">Pure Hacking</a>, <a href="http://www.torridnetworks.com/" target="_blank" title="Torrid Networks">Torrid Networks</a>, <a href="http://www.secpoint.com/" target="_blank" title="SecPoint">SecPoint</a>, <a href="http://www.veracode.com/" target="_blank" title="Veracode">Veracode</a>.<br />
Limitations of Pentest tools: Sometimes these tools can flag false 
positive output which results in spending more developer time on 
analyzing such vulnerabilities which are not present.<br />
<h3>
Manual Penetration Test:</h3>
It’s difficult to find all vulnerabilities using automated tools. 
There are some vulnerabilities which can be identified by manual scan 
only. Penetration testers can perform better attacks on application 
based on their skills and knowledge of system being penetrated. The 
methods like social engineering can be done by humans only. Manual 
checking includes design, business logic as well as code verification.<br />
Penetration Test Process:<br />
Let’s discuss the actual process followed by test agencies or 
penetration testers. Identifying vulnerabilities present in system is 
the first important step in this process. Corrective action is taken on 
these vulnerability and same penetration tests are repeated until system
 is negative to all those tests.<br />
<b>We can categorize this process in following methods:</b><br />
<b>1) Data collection:</b> Various methods including Google 
search are used to get target system data. One can also use web page 
source code analysis technique to get more info about the system, 
software and plugin versions. There are many free tools and services 
available in the market which can give you information like database or 
table names, DB versions, software versions, hardware used and various 
third party plugins used in the target system.<br />
<b>2) Vulnerability Assessment:</b> Based on the data 
collected in first step one can find the security weakness in the target
 system. This helps penetration testers to launch attacks using 
identified entry points in the system.<br />
<b>3) Actual Exploit:</b> This is crucial step. It requires
 special skills and techniques to launch attack on target system. 
Experienced penetration testers can use their skills to launch attack on
 the system.<br />
<b>4) Result analysis and report preparation:</b> After 
completion of penetration tests detailed reports are prepared for taking
 corrective actions. All identified vulnerabilities and recommended 
corrective methods are listed in these reports. You can customize 
vulnerability report format (HTML, XML, MS Word or PDF) as per your 
organization needs.<br />
<h3>
Penetration testing sample test cases (test scenarios):</h3>
Remember this is not functional testing. In Pentest your goal is to 
find security holes in the system. Below are some generic test cases and
 not necessarily applicable for all applications.<br />
<br />
<br />
<b>1)</b> Check if web application is able to identify spam attacks on contact forms used in the website.<br />
<b>2)</b> Proxy server – Check if network traffic is monitored
 by proxy appliances. Proxy server make it difficult for hackers to get 
internal details of the network thus protecting the system from external
 attacks.<br />
<b>3)</b> Spam email filters – Verify if incoming and outgoing
 email traffic is filtered and unsolicited  emails are blocked. Many 
email clients come with in-build spam filters which needs to be 
configured as per your needs. These configuration rules can be applied 
on email headers, subject or body.<br />
<b>4)</b> Firewall – Make sure entire network or computers are
 protected with Firewall. Firewall can be a software or hardware to 
block unauthorized access to system. Firewall can prevent sending data 
outside the network without your permission.<br />
<b>5)</b> Try to exploit all servers, desktop systems, printers and network devices.<br />
<b>6)</b> Verify that all usernames and passwords are encrypted and transferred over secured connection like https.<br />
<b>7)</b> Verify information stored in <a href="http://www.softwaretestinghelp.com/website-cookie-testing-test-cases/" title="Cookie testing">website cookies</a>. It should not be in readable format.<br />
<b>8 )</b> Verify previously found vulnerabilities to check if the fix is working.<br />
<b>9)</b> Verify if there is no open port in network.<br />
<b>11)</b> Verify all telephone devices.<br />
<b>12)</b> Verify WIFI network security.<br />
<b>13)</b> Verify all HTTP methods. PUT and Delete methods should not be enabled on web server .<br />
<b>14)</b> Password should be at least 8 character long containing at least one number and one special character.<br />
<b>15)</b> Username should not be like “admin” or “administrator”.<br />
<b>16)</b> Application login page should be locked upon few unsuccessful login attempts.<br />
<b>17)</b> Error messages should be generic and should not mention specific error details like “Invalid username” or “Invalid password”.<br />
<b>19)</b> Verify if special characters, html tags and scripts are handled properly as an input value.<br />
<b>20)</b> Internal system details should not be revealed in any of the error or alert messages.<br />
<b>21)</b> Custom error messages should be displayed to end user in case of web page crash.<br />
<b>22)</b> Verify use of registry entries. Sensitive information should not be kept in registry.<br />
<b>23)</b> All files must be scanned before uploading to server.<br />
<b>24)</b> Sensitive data should not be passed in urls while communicating with different internal modules of the web application.<br />
<b>25)</b> There should not be any hard coded username or password in the system.<br />
<b>26)</b> Verify all input fields with long input string with and without spaces.<br />
<b>27)</b> Verify if reset password functionality is secure.<br />
<b>28)</b> Verify application for<a href="http://www.softwaretestinghelp.com/sql-injection-%E2%80%93-how-to-test-application-for-sql-injection-attacks/" title="SQL injection"> SQL Injection</a>.<br />
<b>29)</b> Verify application for <a href="http://www.softwaretestinghelp.com/security-testing-of-web-applications/" title="Cross site scripting">Cross Site Scripting</a>.<br />
<b>31)</b> Important input validations should be done at server side instead of JavaScript checks at client side.<br />
<b>32)</b> Critical resources in the system should be available to authorized persons and services only.<br />
<b>33)</b> All access logs should be maintained with proper access permissions.<br />
<b>34)</b> Verify user session ends upon log off.<br />
<b>35)</b> Verify that directory browsing is disabled on server.<br />
<b>36)</b> Verify that all applications and database versions are up to date.<br />
<b>37)</b> Verify url manipulation to check if web application is not showing any unwanted information.<br />
<b>38)</b> Verify memory leak and buffer overflow.<br />
<b>39)</b> Verify if incoming network traffic is scanned to find Trojan attacks.<br />
<b>40)</b> Verify if system is safe from Brute Force Attacks – a trial and error method to find sensitive information like passwords.<br />
<b>41)</b> Verify if system or network is secured from DoS 
(denial-of-service) attacks. Hacker can target network or single 
computer with continuous requests due to which resources on target 
system gets overloaded resulting in denial of service for legit 
requests.<br />
These are just the basic test scenarios to get started with Pentest. 
There are hundreds of advanced penetration methods which can be done 
either manually or with the help of automation tools.<br />
<i></i>

Penetration Testing Complete Guide , With Sample Test Cases - Pentesters Area

What is Penetration Testing? It’s the process to identify security vulnerabilities in an application by evaluating the system or network...

The Gamer's Arena

Add New Exploits to Metasploit from Explooit-db - Pentesters Area

12 Secret Facebook Features Every Marketer Should Use - Pentesters Area

PHP .PDF Programming Guide Book Download - Pentesters Area

Penetration Testing Complete Guide , With Sample Test Cases - Pentesters Area

Like Our

Facebook

Page

Contact Form