Web

Applica+on Pentes+ng

Vivek Ramachandran
SWSE, SMFE, SPSE, SISE, SLAE, SGDE Course Instructor

Cer+ca+ons: hGp://www.securitytube-training.com

Pentester Academy: hGp://www.PentesterAcademy.com

SecurityTube.net
The HTTP Protocol

SecurityTube.net
 Hypertext Transfer Protocol

Client-Server based architecture

Request-Response model to serve Resources

Resources are iden+ed by URI / URL

Versions HTTP 1.0/1.1

1.1 can reuse connec+on for mul+ple URIs

SecurityTube.net
 How does it really work?

HTTP

User
Browser Database
Web Server

SecurityTube.net
Netcat / Curl / Browser

SecurityTube.net
Wireshark Lab

SecurityTube.net