Chapter 9: Attacking Web Application Management

Overview

For most of this book, we've beaten on the front door of web applications. Are there other avenues of entry? Of coursemost web application servers provide a plethora of interfaces to support content management, server administration, configuration, and so on. Most often, these interfaces will be accessible via the Internet, as this is one of the most convenient means of remote web application administration. This chapter will examine some of the most common management platforms and vulnerabilities associated with web application management. We'll also take a look at common web administration misconfigurations and developer errors. Our discussion is divided into the following parts :

• Remote server management

• Web content management/authoring

• Admin misconfigurations

• Developer-driven mistakes