Attacking web servers and web-based systems

Web servers and web-based systems are widely adopted by organizations and agencies for their convenience. Users are able to access various functionalities from these systems. For instance, one can make money transfers using online-banking websites without having to physically go to the bank. Some organizations run web-based ERPs to help. However, these systems are normally exposed to all the threat actors on the internet. Therefore, they can be taken down from anywhere, provided that the attacker has the right tools or uses the right techniques. The following are some of the attacks facing web servers and web-based systems.

SQL injection

This is an old attack but it still works since...