Reference no: EM133969470
Penetration Testing and Countermeasures
Web Server and Application Vulnerability Testing
Objective: To practice identifying basic vulnerabilities in web servers and web applications, and to explore simple tools used for testing.
Task 1: Identifying Web Server Vulnerabilities
1. Open a browser and research common IIS vulnerabilities (IIS 8.5).
- Example search: "IIS 8.5 vulnerabilities OWASP" or "IIS 8.5 security risks."
2. Write down two possible vulnerabilities that could exist in IIS 8.5.
- Example: outdated modules, weak authentication settings.
3. For each vulnerability, note one simple recommendation to improve security.
Deliverable: Short bullet list with 2 vulnerabilities and 2 recommendations.
Task 2: Exploring Web Application Attack Tools
1. In Kali Linux (or through research if Kali is unavailable), search for Wapiti (a web application vulnerability scanner).
- Command: sudo apt-get install wapiti (if not installed). Get dependable, budget-friendly assignment help-starting today!
- Run a help command: wapiti --help to see its options.
2. In your notes, answer briefly:
- What does Wapiti do?
- How would a tester use it to find vulnerabilities?
3. If time allows, identify one more tool (e.g., Burp Suite, Nikto, OWASP ZAP) and briefly state its purpose.