WebGuardia - an integrated penetration testing system to detect web application vulnerabilities

摘要

Due to the immense popularity of the internet, usage of web application has expanded. Since extremely sensitive information are being exchanged via web applications every day, they have become a playground for cyber criminals to steal data and to use them for malicious purposes. In this paper, we present an efficient integrated penetration testing tool to detect five of the top ten web application vulnerabilities to date. New approaches have been proposed to detect two types of vulnerabilities and existing approaches have been modified to enhance the performance of the tool. The results indicate that the proposed tool has been effective and efficient in detecting the specific web app vulnerabilities with respect to other popular open source web vulnerability scanners.