for this tutorial I use some of the tools used most often for pentesting web server and web application; open source tools like Telnet, HTTPrint, Nikto, and Nessus, I will be using this tools to perform: Information Gathering, Scanning, Command Execution Attacks.
A Short Review First…
Pentesting web servers and web applications over the internet has grown over the past few years, chances are that when you are on a server on the internet you are using Hyper Text Transfer Protocol (HTTP), and that 70 percent of the servers visible on the internet today are web servers with tons of services been added on top of HTTP. The web server market has filter down to two mayor players: Apache’s Hyper Text Transfer Protocol Daemon (HTTPD), and Microsoft Internet Information Server (IIS), this two server account for 90 percent of the market share.

Read the rest of this entry »