I have completed Section 1..unable to complete Section 2 or 3
Prior to beginning work on this learning activity, read Chapters 4, 5, 6, and 7 in the textbook, and then complete Lab 4: Exploiting Known Web Vulnerabilities on a Live Web Server.
Each lab has a similar format, which includes introductory materials, step-by-step instructions for lab completion, and instructions for turning in the required deliverables or challenge activities. Within the lab environment, you will always have access to the Common Lab Tasks file to remind you how to complete these elements.
Once you have completed the labs, you will then submit the lab report to Waypoint for grading. If you use the Internet in some of your research, please make sure to follow APA Style
Links to an external site. as outlined by UAGC.
Upon completion of this lab, you are required to provide the following deliverables for each assigned section to your instructor:
SECTION 1:
Lab report file including screen captures of the following:
The results of the SQL injection attempt.
The results of the command execution attempt.
The results of the file inclusion attempt.
The results of the successful file upload.
The results of the successful stored XSS attack.
Any additional information as directed by the lab:
Describe each of the top 10 vulnerabilities and summarize the recommendations for preventing each attack.
Record the results of this test and summarize the steps used to complete the password change.
Lab Assessment Worksheet
Download Lab Assessment Worksheet—contact your instructor for guidance, if needed.
SECTION 2:
Lab report file including screen captures of the following:
The results of the third union attack.
The results of the command execution attempt.
The results of the file inclusion attempt.
The visual confirmation that the admin password has been changed.
The results of the successfully stored XSS attack.
Any additional information as directed by the lab:
Compare the list of vulnerabilities in the 2013 Open Web Application Security Project (OWASP) Top 10 report with the list in the 2017 report.
SECTION 3:
Analysis and Discussion
Tools and Commands
Challenge Exercise
