{"id":24534921,"url":"https://github.com/faisalahmed21/basic-penetration-testing-report-ethical-hacking","last_synced_at":"2026-02-19T00:34:43.841Z","repository":{"id":273341042,"uuid":"919375308","full_name":"FaisalAhmed21/Basic-Penetration-Testing-Report-Ethical-Hacking","owner":"FaisalAhmed21","description":null,"archived":false,"fork":false,"pushed_at":"2025-01-20T16:01:11.000Z","size":3329,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-10-28T04:01:39.564Z","etag":null,"topics":["basic-pentesting","brute-force-attacks","csrf-attacks","ethical-hacking","hashing-passwords","idor-attack","man-in-the-middle-attack","prepared-queries","replay-attack","sql-injection-attacks","xss-attacks"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/FaisalAhmed21.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-01-20T09:24:55.000Z","updated_at":"2025-01-20T16:01:13.000Z","dependencies_parsed_at":"2025-01-20T10:35:47.468Z","dependency_job_id":"36b1d5f5-00c2-42e3-ad42-2c79662bba8b","html_url":"https://github.com/FaisalAhmed21/Basic-Penetration-Testing-Report-Ethical-Hacking","commit_stats":null,"previous_names":["faisalahmed21/basic-pentesting-report-ethical-hacking"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/FaisalAhmed21/Basic-Penetration-Testing-Report-Ethical-Hacking","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FaisalAhmed21%2FBasic-Penetration-Testing-Report-Ethical-Hacking","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FaisalAhmed21%2FBasic-Penetration-Testing-Report-Ethical-Hacking/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FaisalAhmed21%2FBasic-Penetration-Testing-Report-Ethical-Hacking/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FaisalAhmed21%2FBasic-Penetration-Testing-Report-Ethical-Hacking/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/FaisalAhmed21","download_url":"https://codeload.github.com/FaisalAhmed21/Basic-Penetration-Testing-Report-Ethical-Hacking/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/FaisalAhmed21%2FBasic-Penetration-Testing-Report-Ethical-Hacking/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29599386,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-18T22:25:43.180Z","status":"ssl_error","status_checked_at":"2026-02-18T22:25:42.766Z","response_time":162,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["basic-pentesting","brute-force-attacks","csrf-attacks","ethical-hacking","hashing-passwords","idor-attack","man-in-the-middle-attack","prepared-queries","replay-attack","sql-injection-attacks","xss-attacks"],"created_at":"2025-01-22T11:19:33.115Z","updated_at":"2026-02-19T00:34:43.804Z","avatar_url":"https://github.com/FaisalAhmed21.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# TechEcommerce Project - Penetration Testing Report\u003cbr\u003e\u003cbr\u003e\n\n\n## Group Members:  \u003cbr\u003e\u003cbr\u003e\n\n[Faisal Ahmed](https://github.com/FaisalAhmed21) | [MD. Shafiur Rahman](https://github.com/ShafiurShuvo) | [MD. Nafizur Rahman Bhuiya]() | [Maisa Tarannum Srizee]() | [Naima Nawar Achol]()\u003cbr\u003e\u003cbr\u003e\n\n\n## Overview \u003cbr\u003e\u003cbr\u003e\n\nThis repository contains the penetration testing report for the **TechEcommerce Project**, performed by the **Zero Day Defenders** group as part of the Ethical Hacking course (CSE496, Fall 2024). The project focused on identifying vulnerabilities, testing exploit scenarios, and providing recommendations to secure the application.\n\n---\n\n## Project Setup  \u003cbr\u003e\u003cbr\u003e\n\n- Installed XAMPP and set up the project in the `htdocs` folder.\n- Manually recreated the database due to missing `.sql` files.\n\n---\n\n## Attack Summary \u003cbr\u003e\u003cbr\u003e\n\n### Successful Attacks  \u003cbr\u003e\u003cbr\u003e\n\n1. **SQL Injection**\n2. **Data Tampering**\n3. **Replay Attack**\n4. **Brute Force**\n5. **Data Disclosure**\n6. **Insider Attack**\n7. **IDOR**\n\n### Unsuccessful Attacks  \u003cbr\u003e\u003cbr\u003e\n\n1. **MITM**\n2. **Key Disclosure**\n3. **Tampered Content**\n4. **CSRF**\n5. **XSS**\n\n---\n\n## Fixes Implemented  \u003cbr\u003e\u003cbr\u003e\n\n- **Prepared Statements for SQL Queries**\n- **Password Hashing**\n\n---\n\n## Recommended Fixes (Pending Implementation)  \u003cbr\u003e\u003cbr\u003e\n\n- **AES-256 Encryption**\n- **Role-Based Access Control (RBAC)**\n- **Nonces and Tokens**\n- **Detailed Logging**\n\n---\n\n## Conclusion \u003cbr\u003e\u003cbr\u003e\n\nThe project identified and resolved critical vulnerabilities, enhancing application security. Unsuccessful attacks highlighted additional preventive measures for real-world scenarios. Regular audits are recommended to maintain security.\n\nFor more details, visit the [repository](https://github.com/BrownBatsy/techEcommerce_project).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffaisalahmed21%2Fbasic-penetration-testing-report-ethical-hacking","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffaisalahmed21%2Fbasic-penetration-testing-report-ethical-hacking","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffaisalahmed21%2Fbasic-penetration-testing-report-ethical-hacking/lists"}