From the course: Kali Linux Essential Training

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Taking a quick peek at a web server

Taking a quick peek at a web server - Linux Tutorial

From the course: Kali Linux Essential Training

Start my 1-month free trial Buy for my team

Taking a quick peek at a web server

“

- [Instructor] As a pen tester, the majority of targets that we'll be testing will be web servers. It's often useful to be able to get a quick check of a website during a reconnaissance, and Kali provides a tool called WhatWeb for just that purpose. WhatWeb is written by one of Australia's leading pen testers, Andrew Horton. It has over 1,500 plugins, but we can also use it in its simple form to do quick reconnaissance. We can find this in the Web Applications menu, Web Applications Analysis under Web Vulnerability Scanners. WhatWeb. Let's check out Metasploitable's web server, whatweb 10.0.2.32 This quickly provides us with the basic information we need on the web server. It's running on Apache 2.2.8, and it's using PHP and running Web Dev extensions. Let's look at another server, this time on the internet. This is a publicly available testing server, whatweb http://zero.webappsecurity.com This detects that the…

Contents