The week's pick
Random Articles
Reseach Article
A Comparative Study of Pen Testing Tools
| International Journal of Computer Applications |
| Foundation of Computer Science (FCS), NY, USA |
| Volume 179 - Number 50 |
| Year of Publication: 2018 |
| Authors: Mayur Turuvekere, Anala A. Pandit |
10.5120/ijca2018917318
|
Mayur Turuvekere, Anala A. Pandit . A Comparative Study of Pen Testing Tools. International Journal of Computer Applications. 179, 50 ( Jun 2018), 26-30. DOI=10.5120/ijca2018917318
Abstract
It is a well-known fact that it is important and vital to the business to ensure data security. A business can have important information about it clients and customers, its vendors and the sales information which when put in wrong hands can be fatal for not only the business organization but also its various stakeholders. A penetration test, also known as a pen test, is a simulated cyberattack against any computer system to check for exploitable vulnerabilities. In the context of web application security, penetration testing makes a web application firewall more reliable and robust. Penetration testing tools are a part of a penetration test (Pen Test) to automate certain tasks, improve testing efficiency and discover issues that might be difficult to find using manual analysis techniques alone. There are various penetration testing tools available in the market that organizations use as per their requirement. This paper focuses on various attacks that are possible on a web application and comparison of various penetration tools to find best tools for penetration testing.
References
- Pentesting on Web Applications using Ethical Hacking- Rina Elizabeth Lopez de Jimenez, Escuela de Computacion,Itca-Fepade,Santa Tecla, EI Salvador
- Testing Techniques and Analysis of SQL Injection Attacks 2017 - 2nd International Conference on Knowledge Engineering and Applications.
- Sqlmap: automatic SQL injection and database takeover tool (2018, May 19). [Online] Available: http://sqlmap.org/
- What is SQL Injection & How to Prevent it | Netsparker - (2018, June 5). [Online] Available: https://www.netsparker.com/blog/web-security/sql-injection-vulnerability/
- Types of SQL Injection? - (2018, June 5). [Online] Available: https://www.acunetix.com/websitesecurity/sql-injection2/
- Stacked Queries - SQL Injection Attacks - (2018, June 5). [Online] Available: http://www.sqlinjection.net/stacked-queries/
- XPATH Injection – OWASP (2018, May 19). [Online] Available: https://www.owasp.org/index.php/XPATH_Injection
- Cross-site Scripting (XSS) – OWASP (2018, May 19). [Online] Available: https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)
- Denial of Service - OWASP - (2018, June 5). [Online] Available: https://www.owasp.org/index.php/Denial_of_Service
- Session hijacking attack - OWASP (2018, May 19). [Online] Available: https://www.owasp.org/index.php/Session_hijacking_attack
- Session Prediction – OWASP - (2018, June 5). [Online] Available: https://www.owasp.org/index.php/Session_Prediction
- Session hijacking attack – OWASP - (2018, June 5). [Online] Available: https://www.owasp.org/index.php/Session_hijacking_attack
- Man-in-the-middle attack - OWASP- (2018, June 5). [Online] Available: https://www.owasp.org/index.php/Man-in-the-middle_attack
- Man-in-the-browser attack – OWASP - (2018, June 5). [Online] Available: https://www.owasp.org/index.php/Man-in-the-browser_attack
- Heartbleed Bug- OWASP (2018, May 19). [Online] Available: http://heartbleed.com/
- Shellshock “Bash Bug” Vulnerability Explained | Netsparker (2018, May 19). [Online] Available: https://www.netsparker.com/blog/web-security/cve-2014-6271-shellshock-bash-vulnerability-scan/
- Cross Site Tracing – OWASP - (2018, June 06). [Online] Available: https://www.owasp.org/index.php/Cross_Site_Tracing
- What is Local File Inclusion (LFI)? – Acunetix - (2018, June 06). [Online] Available: https://www.acunetix.com/blog/articles/local-file-inclusion-lfi/
- Category: Vulnerability Scanning Tools - OWASP (2018, May 19). [Online] Available: https://www.owasp.org/index.php/Category:Vulnerability_Scanning_Tools
- Acunetix- (2018, June 4). [Online] Available: https://www.acunetix.com/vulnerabilities/web/
- Wapiti - Web Application Vulnerability Scanner v2.3.0 (2018, May 19). [Online] Available: https://www.darknet.org.uk/2015/05/wapiti-web-application-vulnerability-scanner-v2-3-0/
- Crawl coverage and vulnerability detection - Arachni - Web Application Security Scanner Framework (2018, May 19). [Online] Available: http://www.arachni-scanner.com/features/framework/crawl-coverage-vulnerability-detection/
- Issue Definitions (2018, May 19). [Online] Available: https://portswigger.net/kb/issues
- Web Vulnerability & Security Checks | Netsparker (2018, May 19). [Online] Available: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/
- Acunetix Vulnerability Scanner: Web Application Security (2018, May 19). [Online] Available: https://www.acunetix.com/vulnerability-scanner/
- Highest Crawl & Analysis Rate for HTML5 JavaScript Security - (2018, June 4). [Online] Available: https://www.acunetix.com/vulnerability-scanner/javascript-html5-security/
- How Acunetix Compares With Other Web Application Scanners - (2018, June 4). [Online] Available: https://www.acunetix.com/blog/news/acunetix-comparison-web-application-scanners/
- Burp Suite Scanner | PortSwigger - (2018, May 19). [Online] Available: https://portswigger.net/burp
Index Terms
Keywords