Basic 2: Web Application Testing basics

Welcome Readers,

Today we will cover HTTP methods, response codes, types of interception tools and tips.

HTTP Methods:
In the last post we have seen every time server respond with specific response code so that browser understand and reflect the web page.
There are many HTTP methods application use but most commonly used are GET and POST methods. apart from that there are OPTIONS, TRACE, DELETE, PUT, CONNECT, HEAD methods.
Short description for each method,

GET: The GET method is used to retrieve information from the given server using a given URI. Requests using GET should only retrieve data and should have no other effect on the data.

Basic 1: Web Application Architecture

Welcome Readers,

Today we will cover some basics to start web application penetration testing. In simple terms"Web APp HaCkiNg". Just remember guys we are doing this in ethical way so be careful on testing public websites. caution: Do not exploit any website unless you have permission to do so. always be ethical and responsible. Know everything before doing any hack.

So coming to the basics we will first understand what is WEB APPLICATION?
As we daily browse many websites like Facebook, LinkedIn, YouTube, blogger etc with browsers like firefox,safari, IE, Opera. That means we are accessing web application  using web browsers. Web apps are hosted on web servers. There are number of web servers like Apache, IIS, cold fusion etc. These web servers integrates with database server and store the user/website data in different ways.
Take a look on below diagram for clear understanding,

Introduction to Information Security

Hello Techies,

This is my first blog post. I am starting this blog with the purpose "The Information Security"
As the name suggests information security is to protect information and keep it secure. It sounds very simple but Info Sec domain is as vast as Information Technology.
We will first understand what is Information and why to secure it. I would like to share my funny experience when my first interviewer asked me this question.
"what do you mean by information and what measure you will take to secure it from someone?"
Being a noob in the information security field. I just answered, "Ohh if I have some secret information then I will keep it inside locker and  will not share with anybody." 
Then he said okay by this you will achieve confidentiality but what if you need that information and your locker is at home.
Then I answered,"Umm okay I will scramble that data and keep it with me." he said,"Okay what if you have many pieces of information and you forgot the scrambling pattern of respective  piece of information?" You will lose Integrity of your information.

Little about me

Hello Friends,

I am Ninad Sarang. The information security specialist who loves to learn new technologies and try to understand and implement in easy way. I am writing this blog to simplify the jargon's of information security. I hope my blog will help you to learn many things. I will share my knowledge and experiences as much as possible.

Just stay tuned and visit frequently :)