Chapter 13: Hacking Web Servers and Web Apps
The purpose of hacking web servers and web apps is to search for and discover potential vulnerabilities. It helps us identify important upgrades that are needed for software, thus improving security and helping us recognize and respond to any malicious activity. Additionally, with so much being transacted online including shopping, banking, and communications, web apps give us an additional resource to gain access to a person's login credentials, private messages, and financial information.
In this chapter, we will cover the following topics:
- Why web servers create security issues
- Types of architectures
- Threats to both servers and applications
- The vulnerabilities of web APIs, web shells, and webhooks
- Detecting web server hacking attempts
Let's begin by discussing why web servers create security issues for us.
