2015
Pluralsight
Troy Hunt
2:25
English

Vulnerabilities in web server implementations are frequently the vector by which online attackers compromise systems. The impact can range from short periods of outage, to the total disclosure of sensitive internal information. There are many different levels an attacker may focus their efforts on, including the application, the host operating system, and of course the web server itself. Each has their own weaknesses and each must have the appropriate defenses in place to ensure resiliency from online attacks. In this course, we'll look at various attack vectors in web servers. These include exploiting misconfigured servers, leveraging weaknesses in unpatched environments, compromising weak SSL implementations and much, much more. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking

Understanding How Web Servers Are Hacked
Overview
The Impact of Hacking
Understanding Web Servers
Web Servers Versus Web Applications
The Role of Cloud
Summary
Discovering Risks in Web Servers
Overview
Crawling, Enumeration, and Directory Traversal
Mirroring Websites
Reconnaissance and Footprinting
HTTP Fingerprinting
Social Engineering
Summary
Web Server Misconfiguration
Overview
Internal Leakage
Debug Settings
Excessive Access Rights
Misconfigured SSL
Weaknesses in Default Configurations
Summary
Managing and Hardening Web Servers
Overview
Patch Management
Support and End of Life
Locking Down Services
Designing for Network Segmentation
Sandboxing
Summary
Other Attacks Against Web Servers
Overview
Website Defacement
HTTP Response Splitting
Web Cache Poisoning
Brute Forcing Authentication Schemes
Streamline Testing with Automation
Hacking Web Applications
Summary

Download File Size:374.77 MB

---