+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [TUTORIAL] Scan for vulnerabilities in a webserver (/showthread.php?tid=4131870)
Pages: Pages
1
2
[TUTORIAL] Scan for vulnerabilities in a webserver - SIM-2015410 - Mar 23, 2014
Hello Again HF!,
Welcome to another Hacking Tutorial by MeshCollider.
If you are interested, here are links to my other hacking tutorials:Spoiler (Click to View)
Hacking a website: a brief introduction.
Websites are hosted on a webserver - which is just a computer. if we can gain access to the webserver, we can steal or change the files (e.g. defacing), or move from there to attack an entire network.
To gain access, we can either guess/crack passwords for the FTP server on the computer, etc, or we could exploit vulnerabilities in the server or programs running there to gain access quickly and easily.
This tutorial will demonstrate a simple tool to find potential vulnerabilities in a web server, in order to exploit them. This tool is called Nikto. It is one of the most widely used website vulnerabilities tools for security (penetration) testing and black hat hacking.
WARNING: Although the tool is effective, it is very "noisy" - it is not stealthy and can easily be detected if the webserver being scanned has some sort of detection software installed or has a proactive administrator.
1) Run Nikto on Kali Linux
As usual, we will use Kali because it already has Nikto installed. Choose "Kali Linux -> Vulnerability Analysis -> Misc Scanners -> nikto" and run it.
2) Scan the target server
To simple scan for vulnerabilities, we will use this command:
Code
nikto -h example.comCode
ping example.com3) Analyse the detected vulnerabilities.
Nikto will give us a nice little report of potential vulnerabilities in the target server. For example, my scan tells us the server is Apache 2.2.14, probably on Ubuntu, and gives a list of potential weaknesses we could try to exploit. Some vulnerabilities will be given with a OSVDB prefix, which stands for Open Source Vulnerability Database - a database of known vulnerabilities at www.osvdb.org. You can read more about the vulnerabilities there, by searching the vulnerability ID.
WATCH OUT FOR FALSE POSITIVES! Nikto merely scans to see if the server responds without error to known exploitable URLs, it does not attempt to execute the exploits itself. Some of the "vulnerabilities" nikto returns may not be vulnerable - this is called a false positive.
In future tutorials, I will demonstrate other ways to scan for vulnerabilities, and ways to exploit these vulnerabilities after you have found them.
Thanks for reading, please reply with your thanks if you enjoyed this and/or found it useful.
Watch out for future hacking tutorials from me - further wireless cracking, metasploit and other common hacking topics!
Written by MeshCollider 🤝
* - Ch1m4zz - Mar 24, 2014
Thanks for this, might be useful one day!
* - SIM-2015410 - Mar 24, 2014
(Mar 24, 2014 01:10 AM)Ch1m4zz Wrote: Thanks for this, might be useful one day!
Congratz, first reply! Haha, it's not hard, none of my tutorials have been receiving much interest. I appreciate the fact that you have bothered replying, thank you 🙂
* - 0dаy - Aug 19, 2014
This is actually a great tutorial. I think one of the reasons these tutorials don't get the credit they deserve is people want to just download magical software that does everything for them with little work from them.
* - SIM-2015410 - Aug 19, 2014
(Aug 19, 2014 05:51 PM)0day* Wrote: This is actually a great tutorial. I think one of the reasons these tutorials don't get the credit they deserve is people want to just download magical software that does everything for them with little work from them.
Thanks man, yeah, there are a lot of LQ people around here. I appreciate your reply though!
* - CorsoConnected - Aug 21, 2014
Looks good, Can't wait to try it mate. Just have to get all my protection in place, VPN, VM With Kali ect first lol. Pretty new to the scene =/ but not new to computing or programming.
* - Fruit Snacks - Jan 23, 2015
Nice tutorial man ! will definitely help people.
* - Furorem - Jan 24, 2015
Nikto is one of the best tools to scan vulnerabilities, Linux distros have lots of stuff like this. But this is Vulnscanner #1 🤝
* - BrokenMachine99 - May 12, 2015
nice tut man. great work. keep it up.
* - janneman - May 12, 2015
Thanks man, yeah i will try this
* - 32x0LF - Jun 1, 2016
Could you make a TUT on stealthy scanners? thanks
* - testingon - Jun 7, 2016
nice work done
thanks for sharing....
* - █ＢＯＲＮＥ█ - Jun 7, 2016
MeshCollider your tutorials are great never stop them coming!
* - Bouness - Jun 7, 2016
Nice tutorial man, giving the command to use on Kali, going to try this out now
* - Alterations - Jun 7, 2016
HQ tutorial, thank you very much!