Legal Disclaimer

More documents

Recommendations

Info

Hacking For Beginners – Manthan Desai 2010 Example of a directory traversal attack via web application code In order to perform a directory traversal attack, all an attacker needs is a web browser and some knowledge on where to blindly find any default files and directories on the system. The following example will make clear everything Visit this website vulnerable to directory transversal attack http://www.chitkara.edu.in/chitkara/chitkarauniversity.php?page=notification.php This web server is running on UNIX like operating system. There is a directory 'etc' on unix/linux which contains configuration files of programs that run on system. Some of the files are passwd, shadow, profile,sbin placed in 'etc' directory. The file etc/passwd contains the login names of users and even passwords too. Lets try to access this file on web server by stepping out of the root directory. Carefully see the position of directories placed on the web server. We do not know the actual names and contents of directories except 'etc' which is default name , So I have marked them as A,B,C,E or whatever. We are in directory in F accessing the web pages of website. Let’s type this in URL field and press enter http://www.chitkara.edu.in/chitkara/chitkarauniversity.php?page=etc/passwd This will search the directory 'etc' in F. But obviously, there is nothing like this in F, so it will return nothing now type http://www.chitkara.edu.in/chitkara/chitkarauniversity.php?page=../etc/passwd w w w . h a c k i n g t e c h . c o . t v Page 56
Hacking For Beginners – Manthan Desai 2010 Now this will step up one directory (to directory E ) and look for 'etc' but again it will return nothing Now type http://www.chitkara.edu.in/chitkara/chitkarauniversity.php?page=../../etc/passwd Now this will step up two directories (to directory D) and look for 'etc' but again it will return nothing. So by proceeding like this, we go for this URL http://www.chitkara.edu.in/chitkara/chitkarauniversity.php?page=../../../../../etc/passwd It takes us 5 directories up to the main drive and then to 'etc' directory and show us contents of 'passwd' file. To understand the contents of 'passwd' file, visit http://www.cyberciti.biz/faq/understanding-etcpasswd-file-format/ You can also view etc/profile; etc/services and many others files like backup files which may contain sensitive data. Some files like etc/shadow may not be accessible because they are accessible only by privileged users. If proc/self/environ would be accessible; you might upload a shell on server which is called as Local File Inclusion. Database Servers • The Database server is a key component in a client/server environment. Specially the Websites which have a User Login Architecture. • Database Server holds the Database Management System (DBMS) and the Data Records. Upon requests from the client machines, it searches the database for selected records and passes them back over the network. • Software to setup a Database Server: – Oracle – SQL Server – MySql w w w . h a c k i n g t e c h . c o . t v Page 57
Page 2 and 3:
Hacking For Beginners - Manthan Des
Page 4 and 5:
Page 6 and 7: Hacking For Beginners - Manthan Des
Page 106 and 107:
Page 108 and 109:
Page 110 and 111:
Page 112 and 113:
Page 114 and 115:
Page 116 and 117:
Page 118 and 119:
Page 120 and 121:
Page 122 and 123:
Page 124 and 125:
Page 126 and 127:
Page 128 and 129:
Page 130 and 131:
Page 132 and 133:
Page 134 and 135:
Page 136 and 137:
Page 138 and 139:
Page 140 and 141:
Page 142 and 143:
Page 144 and 145:
Page 146 and 147:
Page 148 and 149:
Page 150 and 151:
Page 152 and 153:
Page 154 and 155:
Page 156 and 157:
Page 158 and 159:
Page 160 and 161:
Page 162 and 163:
Page 164 and 165:
Page 166 and 167:
Page 168 and 169:
Page 170 and 171:
Page 172 and 173:
Page 174 and 175:
Page 176 and 177:
Page 178 and 179:
Page 180 and 181:
Page 182 and 183:
Page 184 and 185:
Page 186 and 187:
Page 188 and 189:
Page 190 and 191:
Page 192 and 193:
Page 194 and 195:
Page 196 and 197:
Page 198 and 199:
Page 200 and 201:
Page 202 and 203:
Page 204 and 205:
Page 206 and 207:
Page 208 and 209:
Page 210 and 211:
Page 212 and 213:
Page 214 and 215:
Page 216 and 217:
Page 218 and 219:
Page 220 and 221:
Page 222 and 223:
Page 224 and 225:
Page 226 and 227:
Page 228 and 229:
Page 230 and 231:
Page 232 and 233:
Page 234 and 235:
Page 236 and 237:
Page 238 and 239:
Page 240 and 241:
Page 242 and 243:
Page 244 and 245:
Page 246 and 247:
Page 248 and 249:
Page 250 and 251:
Page 252 and 253:
Page 254 and 255:
show all

Legal Disclaimer

Create successful ePaper yourself

Delete template?

Save as template?