From the course: CompTIA PenTest+ (PT0-003) Cert Prep

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Application exploits, part 2

Application exploits, part 2

From the course: CompTIA PenTest+ (PT0-003) Cert Prep

Start my 1-month free trial Buy for my team

Application exploits, part 2

“

- Always remember that if you want to attack application, there's lots of different ways that you can do it. Don't just focus on the first type of attack that you see or learn about. Make sure that you explore all the different ways because applications are always going to have higher authority than just attacking from the outside. In other words, they're normally connected to some sort of database and they have data access already baked in to the application. So let's look at some more types of application exploits. Authentication is a rich area to attack, or at least exploits centered around authentication. We can look at credential brute forcing, which we've already talked about a little bit earlier. Remember we talked about Hydra. How about offline cracking? We can use offline cracking, online cracking, where we basically want to try to find a credential that allows us to log into an application and operate as an…

Contents