Chapter 7. Advanced Exploitation

In this chapter we will cover:

• Searching Exploit-DB for a web server's vulnerabilities
• Exploiting Heartbleed vulnerability
• Exploiting XSS with BeEF
• Exploiting a Blind SQLi
• Using SQLMap to get database information
• Performing a cross-site request forgery attack
• Executing commands with Shellshock
• Cracking password hashes with John the Ripper by using a dictionary
• Cracking password hashes by brute force with oclHashcat/cudaHashcat