Chapter 8Web Server Hacking, Web Applications, and Database Attacks

This Chapter helps you prepare for the EC-Council Certified Ethical Hacker (CEH) Exam by covering the following EC-Council objectives, which include understanding the business aspects of penetration testing. This includes items such as

Identify the components of the web infrastructure

Know the tools and techniques to scan web servers

Image Attacking web servers requires attackers to first scan and identify web servers. Techniques such as banner grabbing are used to identify web servers, and tools used include Telnet and Netcat.

Identify the three common IIS vulnerabilities

Buffer ...

Get Certified Ethical Hacker Exam Prep now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.