8/19/2019 Hacking a Website Step by Step

http://slidepdf.com/reader/full/hacking-a-website-step-by-step 1/3

1. How to Hack Websites & Servers from Scratch : Step by Step Tutorial for Beginners

In Depth Security Assessment With a Full Report Detailing Vulnerabilities DiscoveredUsing NESSUS !penVas" #earn ho$ to %ac& a Website Webserver

N!'E" !m going to provi"e the common metho"ology that is followe" when hacking amachine#network#server. This tutorial will give you a goo" un"erstan"ing & an overview about

professional penetration testing in a black bo$ %attacker point of view. t is "esigne" to give you ani"ea on how an attacker can break into your system' what am gonna say will increase yourawareness & will open the "oor for you to go out & e"ucate yourself easily. gathere" thisinformation from various sources an" tutorials' i have change" many things' clari(e" many parts'given some references' an" put a lot of information together. !m still a learner & on the way to mygoal. However' this won!t prevent me from teaching others what i have learne" so far & "on!t worry'i!m not going to provi"e you with any info that i!m not sure about yet. t is not the best tutorial outthere' but at least it is a goo" starter. will speak in a hacker %attacker or blackbo$ point of view.

First chk this:

The best vulnerability scanner software and assessment tool: Nessus &

The Best Penetration Testing and Vulnerability E!loitation Tool: "etas!loit

Framework  

Tools #sed during !enetration testing are freely available on internet:

$% NE#

'% (!enV) erver 

*% (!enV) +lient 

,% Nma!

-% Nikto

.% /0i download here or  here

1% /0"a!

2% "etas!loit 

Before you hack a system3 you must decide what your goal is% )re you hacking to !ut 

the system down3 gaining sensitive data3 breaking into the system and taking the

4root4 access3 screwing u! the system by formatting everything in it3 discovering

vulnerabilities & see how you can e!loit them3 etc %%% 5 The !oint is that you have to

decide what the goal is 6rst%

The most common goals are: 

7% Breaking into the system & taking the admin !rivileges%

$8% 9aining sensitive data3 such as credit cards3 identi6cation theft3 etc%

8/19/2019 Hacking a Website Step by Step

http://slidepdf.com/reader/full/hacking-a-website-step-by-step 2/3

ou should have all of your tools ready before you start taking the ste!s of hacking%

There is a #ni version called backtrack% ;t is an (!erating ystem that comes with

various sets of security tools that will hel! you hack systems <!enetration tests=%

ou should set the ste!s <methodology= that you !lan to take in your >ourney before you do anything else% There is a common methodology followed by hackers3 i will

mention it below% ?owever3 you can create your own methodology if you know what

 you are doing%

Steps need to be followed to hack a server is as cited below: 

$$% @o a manual review of the target system or server to get an overview

of the target% This is !haseA$ and known as Reconnaissance.

$'% econd ste! is ervice enumeration% ?ere you have to use Nma! to

determine what services are o!en and available for manual testing% This is

 !haseA' and known as Scanning. To know how to !erform Enumeration and

foot!rinting attack3 visit this link.

$*% The third ste! is canning target to 6nd the vulnerabilities% This is also

 !art of !haseA' canning% For this you have to use NE# or (PEN V)%

These tools will scan all o!en !orts3 regardless of common and defaulted

settings% This will con6rm listening services and check those against a

database of e!loitable services% To see if you are running any services that

are misAcon6gured or vulnerable to e!loits% To know how NE# works visit

this link% ;f you want to working of NE#%%%( ?ow to use NE# visit this

link% To visit NE# video tutorials available on internet visit this link%

$,% ou can also use Nikto% ;t will used to check the web server<s= for misA

con6gurations and e!loitable web a!!lications% To know how Nikto works

visit this link%

$-% )fter all these scanning3 !lay with /0% #se /0iC and Dlma! for this%

ou can also use few more /0 tools3 softwares and techniDues% To know

these underground /0 ti!s n tricks visit this link%

$.% The net ste! is to get access on system using the vulnerabilities

found% This is !haseA* known as 9aining )ccess on remote system% This youcan achieve using "etas!loit software% To know how to use metas!loit3 visit

this link % ?ere you will all the available video tutorial for metas!loit% ) very

good to start% #sing these videos  you can easily learn how to use metas!loit%

The most u! to date video for "etas!loit * can be found here: E!loring

"etas!loit * and the New and ;m!roved eb ;nterface Part $ & E!loring

"etas!loit * and the New and ;m!roved eb ;nterface Part '% ) good Gash

8/19/2019 Hacking a Website Step by Step

http://slidepdf.com/reader/full/hacking-a-website-step-by-step 3/3

tutorial that shows you ste! by ste! how to use it: "etas!loit at ;ron 9eek% 

ThereHs a !resentation by ?@ "oore himself at +ansecwest '88.: csw8.A

moore%!df )nd a cou!le of videos s!awned from that here: +om!uter defense

T)I Presentation

$1% The net ste! is to maintain you access on the com!romised system%This is !haseA, and known as "aintaining )ccess%

$2% THIS IS THE MOST IMORT!"T STE !"# THE $!ST H!SE. This

is !haseA- known as +overing Tracks% )fter you activities3 you must remove all

 your track records%%%% othet wise you know%%%;T act is very strong%

This tutorial is designed to !rovide you with recommendations for securing your

server against the ma>ority of attackers% Below are some sam!le re!orts showing

Nessus and (!enVas% ;t is recommended that always run multi!le scanning tools%

Never rely on a single automated scanning% )utomated scanners miss a lot and are

 !rone to false !ositives%

Nessus can "ulti!le ?osts

am!le e!ort 

(!enVas can "ulti!le ?osts

am!le e!ort