✔️ How to approach web application as a penetration tester

✔️ Fundamental Attacks against web applications

• Web applications are different from desktop applications

1. Web Server Fingerprinting

2. HTTP Verbs

3. Directories and Files Enumeration

4. Google Hacking

5. Cross Site Scripting

6. SQL Injections

Netcat

Dirbuster

Dirb

XSS

SQL Injection

SQLMap