Security-Testing

Security-Testing is a software company. Security Testing utilizes Website scanner, malware scan, application security, penetration testing for Hacker safe website security and Trust seals are provided. We offer cloud based automated services.

[sectesting-blog]

70 Pakistan Government Websites Hacked.

New Post has been published on http://www.security-testing.net/blog/?p=171

70 Pakistan Government Websites Hacked.

Pakistan government webserver hacked by Bangladeshi hackers and defaced 70 number of government websites hosted in that webserver.

The list of hacked websites,

http://pakistan.gov.pk/web/

http://president.gov.pk/web/

http://pmo.gov.pk/web/

http://nheprn.gov.pk/web/

http://estate-office.gov.pk/web/

http://raha.safron.gov.pk/web/

http://ntb.gov.pk/web/

http://saarcstat.org

http://msw.establishment.gov.pk/web/

http://prw.gov.pk/web/

http://ombudsman.gov.pk/web/

http://federalombudsman.gov.pk/web/

http://pcb.gov.pk/web/ …etc

You can get the entire list here.

Mirror Links:

Mirror-Zone

Znone-H

[sectesting-blog]

RC4 Encryption Algorithm – Cracking

New Post has been published on http://www.security-testing.net/blog/?p=164

RC4 Encryption Algorithm – Cracking

What is RC4?

RC4 is an encryption algorithm in cryptography, which is widely using for internet protocols like TLS (Transport Layer Security), WPA, and WEP.

Is it possible to crack RC4 encryption?

Yes! Security researchers Mathy Vanhoef and Frank Piessens have published a white paper called “RC4 NOMORE” with proof of concept video of cracking the RC4 encryption algorithm in their website called www.rc4nomore.com,

You can download the white paper directly form here.

Watch the RC4 cracking proof of concept video,

[sectesting-blog]

DDoS - Exploined

New Post has been published on http://www.security-testing.net/blog/?p=160

DDoS - Exploined

What is DDoS?

DDoS (Distributed Denial of Service) is a web based attack vector, which is used to make a network or web resources like website or web application unavailable for its legitimate users.

Most of the case attacker use his Botnet controlled zombie machines to perform this DDoS attack.

For better understanding watch video.

Currently most of the web hosting service providers have Load-Balancer mechanisms to avoid this kind of attacks. So hope you guys understand about DDoS attack.

[sectesting-blog]

Website Security Testing - Checklist

New Post has been published on http://www.security-testing.net/blog/?p=155

Website Security Testing - Checklist

In this post I am going to list OWASP’s website security testing checklist.

OK! But what is website security testing?

Website security testing is a process of checking vulnerability in particular website or web application, Mostly these testings are done by manually or with automated tools.

Website Security Testing Checklist:

Information Gathering

Configuration Management

Secure Transmissions

Authentication

Session Management

Authorization

Data Validation

Denial of Service

Business Logic

Cryptography

Risky Functionality- File Uploads

Risky Functionality- Card Payment

Error Handling

If you want to know more about website security testing means visit here also you can learn manual security testing and ethical hacking from here.

[sectesting-blog]

Backdoor Shell - Web Application

New Post has been published on http://www.security-testing.net/blog/?p=151

Backdoor Shell - Web Application

Backdoor Shell is a piece of programming code or script (PHP,ASP,JSP), which can be used to gain full control of web server or application.

Most of the case this shell’s are used to upload a defacement page or download some confidential information like customer data, credit card details that is stored in that particular server.

Famous Backdoors are,

C99

R57

C100

ASPXspy2

dQ99shell

TrYaG Shell

ANGEL SHELL

If an attacker found a vulnerable upload section means he uploads shell into server via that upload section and gain access.

[sectesting-blog]

Web Application Security Testing Tools

New Post has been published on http://www.security-testing.net/blog/?p=147

Web Application Security Testing Tools

In this post we are going to discusses about tools and browser add-on which is used to do security auditing and testing for web application and websites.

And these tools are open source so you can download it for free of cost.

Tools List

Burp Suite:

Burp Suite is one of the best applications which is used to finding vulnerability in web application and websites.

Wapiti:

Wapiti is a powerful tool to perform website and web application auditing. With this tool you can do block box testing.

WebScarab:

WebScarab is web application security testing tool. This tool act as a local proxy server so that you can integrate you web browser and perform a security testing.

Sqlmap:

Sqlmap is one of the hacker favorite tools to perform SQL Injection attack against web application and sites; with this tool you can do security testing.

Add-ons List

Firebug:

Firebug is a browser add-on which allows you to edit the page source and values.

Cookies Manager:

Cookies Manager allow you to edit and modify the cookie values.

XSS Me:

XSS Me add-on is used to do cross site scripting attack in web applications and sites.

SQL Inject Me:

SQL Inject Me add-on is used to do manual SQL injection attacks.

[sectesting-blog]

Website Sanning With Security-Testing

New Post has been published on http://www.security-testing.net/blog/?p=140

Website Sanning With Security-Testing

Security-Testing is an awesome cloud scanning platform for web applications and websites. With this cloud tool you could conduct security auditing for your websites by yourself, and also you can download the clear audit report.

Security-Testing scan for malware and wide range of web application vulnerability like OSWAP’s top ten web attacks and more, you can find entire list in their official page.

For better understanding watch this video…

Security-Testing offers,

SERM

Malware Detection

Vulnerability Scanning

Performance

Monitoring

Inventory and Trustmark Seal

Let’s get start your website auditing with security-testing…

[sectesting-blog]

Cross-Site Request Forgery (CSRF) Attack

New Post has been published on http://www.security-testing.net/blog/?p=133

Cross-Site Request Forgery (CSRF) Attack

Cross-Site Request Forgery (CSRF) is one of OWASP’s top ten attack vector for web application, and it’s a very dangerous attack.

In this CSRF method attacker deceive victim’s Browser toexecute the malicious script to perform a particular task. For example, assume Mr. Jack login to his bank account, so currently he have active session in his browser, then he access his mail account checking for mail at the same time he sees a mail from an “[email protected]“ in which there is a link to check his account statement.So Jack clicks that link and checks his account statement. Then he closes that page and continues his regular browsing Later he tries to make a transaction but he couldn’t, so he checks his account online once again and he is shocked to find out his account is cleared out by some unknown person. So how this has happened. Yes! You are thinking right… The attacker created a fake account statement page with his malicious <image> or <iframe> Tag through which he was able to transfer the entire amount form Jack’s account to his bank account.

<img src=”onlineabank.com/transfer/jack_bal?=123456789&attacker=0987654321>”

You may ask how an attacker could transfer the amount from jack’s account with out a password.  If you would have noticedjack’s actual session is active when he clicked that link in the mail through which attacker gained access to that session. If any body gains your active session they can perform any kind of activity with in that web application. Now you know how dangerous is CSRF.

[sectesting-blog]

Web Parameter/HTTP Tampering Attack

New Post has been published on http://www.security-testing.net/blog/?p=123

Web Parameter/HTTP Tampering Attack

   Web Parameter Tampering or HTTP Tampering attack is manipulation of parameters that is exchanged between client and server in order to modify application data, like user info or price, quantity, count, etc…

There is lot of open source tools available to do this attack, but most hackers and security professionals using Burp Suite or Firefox with Tamper Data Add-on.

For example, assume an attacker trying to buy a new xxx phone from www.xyz.com. So that he login into his fake account then add the specific product  to his cart then he go to checkout section and also proceed to pay the amount for that single phone. Then he start the HTTP tampering attack and change the quantity as two phone. So now he pay the amount for only one phone but as per the application data in server is as he pay the amount for two phones… wow!

[sectesting-blog]

Kali Linux 2.0 - Advanced Penetration Testing Distribution

New Post has been published on http://www.security-testing.net/blog/?p=112

Kali Linux 2.0 - Advanced Penetration Testing Distribution

Kali Linux is one of the advanced open source penetration testing OS, spicily designed for penetration testers and ethical hackers.This operating system contains lot of penetration testing and hacking tools that is used to do security testing and cyber forensic investigation.

You can download the current version of Kali OS from their website https://www.kali.org

Now! Official they announced Kali 2.0  release date is August 11th,2015.

So you people are ready to download your free version of Kali 2.0 but before that watch this awesome teaser.

 Video source www.kali.org

[sectesting-blog]

Cross Site Scripting Attack (XSS)

New Post has been published on http://www.security-testing.net/blog/?p=102

Cross Site Scripting Attack (XSS)

Cross Site Scripting (XSS) is a type of code injection based attack, with this injection attack attacker can execute malicious script with help of end user browser application.

There are two types of Cross Site Scripting:-

Persistent

Non-Persistent

Persistent XSS :

In this type of XSS attack, attacker can steal active session cookies of users who visit that injected web page.

For example if that website admin visiting that injected page means attacker can able to access his session cookies so that attacker can gain admin access of that web site.

Non-Persistent XSS :

In this Non-Persistent XSS method attacker will craft a malicious link to target victim. When the victim clink or visit that link, the victim browser will execute the malicious so that attacker can gain session cookies.

You can also practice this XSS attack in your system with XAMPP and DVWA setup. If you don’t have such a setup in your system means just follow these easy steps to configure in your system.

[sectesting-blog]

Learn Web Application Hacking and Security Testing

New Post has been published on http://www.security-testing.net/blog/?p=93

Learn Web Application Hacking and Security Testing

Yes! You can hack and learn web application in your own system.

How…?

With help of XAMPP and DVWA (Damn Vulnerable Web Application).

You can setup a  vulnerable web application and server. So that you can practice security testing and website hacking in your very own web server (your system).

Steps to config..

Download XAMPP and DVWA from their websites.

Just run the XAMPP setup and install it to your system.

Once completed you XAMPP installation, open your web browser and type http://127.0.0.1 or http://localhost (you can access the XAMPP control panel just close that window)

Then extract the “DVWA-1.0.8.zip” file into this “C:\xampp\htdocs” path.

Now, edit this file “C:\xampp\htdocs\dvwa\config\config.inc.php” with notepad and change database password. (By default there is no password for your database root account so you just simply change it with this line $_DVWA[ 'db_password' ] = ”;  )

Finally open your web browser and type this URL  “http://localhost/dvwa/setup.php”

Clink the “Create / Reset Database” button.

Done! now you have successfully setup the web server and web application in your system.

In feature we gonna learn more about web application security testing and hacking with this DVWA and XMAPP so you keep follow this blog.

[sectesting-blog]

SQL Injection

New Post has been published on http://www.security-testing.net/blog/?p=84

SQL Injection

SQL injection attack is one of the major attack vector for web applications. This attack is holding number one position in OWASP’s top 10 web application attacks list.

What is SQL Injection?

  SQL Injection is a code injection technique to get information like database tables and column with malicious SQL query.

How to do SQL Injection?

There is two methods to do this attack that is Manual SQL Injection and Automated SQL injection.

Manual SQL Injection:

Attacker have to perform SQL Injection attack with manual SQL queries over browser URL links.

Automated SQL injection:

Attack will perform SQL Injection with some automated tools like ‘sqlmap’. So tool will check all kind of SQL Injection queries.

Some famous SQL Injection tools:-

SQLmap

sqlninja

havij (Commercial Tool)

Example:-

This is basic example for SQL Injection, here we gonna use google dork to do this attack.

Search this key word with google ” inurl: ‘admin.aspx’ ” then you will some results with admin login panel page.

Then, use this 1’or’1’=’1  query as username and password… You can able to login as admin.

Done! But this is only basic attack. To know more about SQL Injection keep follow this blog.

[sectesting-blog]

Top 10 Web Application Attacks.

New Post has been published on http://www.security-testing.net/blog/?p=79

Top 10 Web Application Attacks.

In this post we gonna discusses about OWSAP’s top ten web attacks vectors.

    Who and What is OWSAP ?

  OWASP is abbreviation of Open Web Application Security Project.which is a community for web application security.

Top 10 Web Application Attacks:-

SQL Injection

Broken Authentication &  Session Management

Cross-Site Scripting (XSS)

Insecure Direct Object References

Security Misconfiguration

Sensitive Data Exposure

Missing Function Level Access Control

Cross-Site Request Forgery (CSRF)

Using Components with Known Vulnerabilities

Unvalidated Redirects and Forwards

This post is not ending here, in upcoming posts we gonna discusses about each and every topics with example attacks so you people keep follow and learn about web application attacks.

[sectesting-blog]

WiFi Hacking

New Post has been published on http://www.security-testing.net/blog/?p=70

WiFi Hacking

What is WIFI?

WiFi is a wireless based local area networking technology (IEEE 802.11) which is used to        connect various  electronics devices to the  local network without any wire connectivity.

Modern WiFi routers using various type of security protocols like WEP (Wired Equivalent Privacy), WPA (WiFi Protected Access), WPA2.

WEP protocol is not secure, attacker can easily able to hack this protocol without any difficult. But WPA/WPA2 protocol is more secure that is compared to WEP protocol.

How to hack WIFI network?

WEP encrypted network can easily hackable with Aircrack-ng  tool. Aircrack is Open Source tools works in Linux environment. With this 5 to 10 mints enough to hack an WEP encrypted WiFi network (So any of you people still using WEP encryption means immediately change WEP to WPA/WPA2 ).

Is WPA / WPA2 not hackable?

No!   WPA / WPA2 encryption also hackable but it will take some time to get the correct password. So still now WPA and WPA2 is safe to use.

[sectesting-blog]

Test Post from http://www.security-testing.net/blog