Identificación, explotación y corrección de vulnerabilidades en sitios web desarrollados mediante gestores de contenido gratuitos

Abstract

Websites help thousands of companies and individuals to post their services or products on the Internet, this has caused the reach they have to the general public to be much broader than other modern means of dissemination such as radio, television and marketing. According to the appearance of the web 1.0 in 1990 the internet has evolved to such an extent that we are already on the web 4.0, it is necessary to mention, in addition that at the present time there are more than 1.88 billion web sites present in Internet and in constant increase. In order to develop a website and put it into production you must have a lot of average knowledge in servers, back-end programming, frontend, and more technologies. Nowadays, with the advent of Content Management Systems, CMS, implementing a website is much easier and does not require too much programming knowledge, Wordpress is the most used tool and for this reason it is the one that suffers more attacks, this manager has a presence of 42.5% on the Internet, while Joomla represents 1.9%. Although some studies have explored some methods to perform penetration tests, there is little research on flexible standards that compare two or more CMS with the respective balanced and default configurations in security aspects, because of this a real-life scenario was implemented with two websites implemented in two different CMS, for such tests both have the same configurations, are implemented online, share the same server and belong to the e-commerce category. After having implemented the scenario, the tools with which the penetration tests will be performed were selected, we chose to use the Parrot Security operating system with all the suite of tools that brings by default for audits of any kind, and other online tools for information gathering. The penetration test execution standard, PTES that was implemented consists of seven stages, which start from pre-engagement interactions to reporting, however, an additional stage was added to correct the vulnerabilities found for both websites; a technical report was made because the executive is used when working directly with a company and such a report is of interest to all executives of the entity. The manual tests yielded favorable results, and the Detectify service was also used to perform automatic scans in search of vulnerabilities, the scans take an average of 5 to 6 hours, with this we have two results of penetration tests and can make a comparison of which is more accurate and covers most vulnerabilities.