This chapter focuses on the basics that we need to know before we start with web application penetration testing. We will start by learning what a website actually is, as well as giving an overview of the processing that happens on the backend when we request access to a website. Later, we will discuss ways to attack a website, and look at a few tools.

The following topics will be covered in this chapter:

• What is a website?
• Attacking a website