Interacting with Server Vulnerabilities in Web Applications
In this chapter, we will learn about the main vulnerabilities in web applications. We will also learn about the tools we can find in the Python ecosystem for discovering vulnerabilities in Content Management System (CMS) web applications and sqlmap for detecting SQL vulnerabilities. In terms of server vulnerabilities, we will cover testing Tomcat servers and the process of detecting vulnerabilities in web applications with tools like nmap and Fuxploider.
From a security point of view, it is important to identify server vulnerabilities because applications and services are continually changing, and any unpatched security issue can be exploited by an attacker who aims to exploit vulnerabilities that have not been initially identified. At this point, it is important to note that not all security vulnerabilities can be fixed with a patch. In some cases, it’s a flaw in a library or the operating system may require additional...
