In this lecture, I'd like to highlight a very important note when it comes to website penetration testing
websites are installed on Web servers, on normal computers.
Like we said before, these normal computers have IP addresses and using the IP address, we can access
our target website.
Now, in many scenarios, your Target website will or your target server will contain a large number
of websites.
So it'll have the website that you're looking for that you're targeting, but it will also contain other
websites on the same server.
So on the same file system.
What this means is if you, for example, could not find any vulnerabilities in your Target website,
you can try to hack into any other website that is installed on the same server.
If you could do that, then you'll be able to gain access to the server.
Gaining access to the server basically means you have access to all the other websites because the server
is just a computer and you can literally just navigate to the website that you want to hug and gain
access to that website.
So if you're trying to hack into our website and you couldn't find any exploits, then the next step
would be trying to hack any other website that exist on the same server.
So one wonders, what I mean by exist on the same server is they have the same IP address.
So let me show you here an example.
I'm going to be showing an example of the dot com.
So my blog, because there is a lot of websites on the same server.
And if we look here on Raptorex dot com and I came down here to name pointing to the same IP address,
you can see all of these websites exist on the same server as Z dot com.
So if you could manage to hack into any of these websites, you'll be able to navigate from out of that
website and then into the dot com and then gain full access to my website.
So let me just show you here, if I copy any of these domain names, for example, we have this one
really that me and I'm just going to go on to my terminal.
Now, I've already if I do a ping.
Zaid.
Dotcom.
You'll see that this is my IP address of my website, and if I do a ping on one of the websites that
exist and it's for now we're using really bothers me.
So if I go ping Kariba two or three.
You'll see that both websites have the same IP address.
This means that both websites are installed on the same computer and if we could hack into one of them,
we can literally just navigate from that website into the other from our interpreter show or from our
Rechelle or any type of show that we're using.
Another way of finding websites on the same domain is using Bing, and it's a really simple way.
So if if you just go on Bing.
And I'm just going to put up and then I'll put the IP of my Target website again, you'll see all the
other websites that exist on the same server as your Target website.
So you can literally hack into any of these websites and from there hack into my website and gain access
to it.
This is very important because in many cases your target could be very well secured, but the server
itself is not secure.
So you can manage to hack one of the other websites and then navigate through the server to your target.