On the Challenges of Automated Testing of Web Vulnerabilities
Luis Felipe de Lima, Matheus C. Horstmann, David Novaski Neto, Andre Ricardo Abed Gregio, Fabiano Ferreira da Silva, Letícia Mara Peres · 2020
Pentesting is an important process to reduce the risks associated with attacks in Web applications. However, testers may find some difficulties while conducting this process. This paper aims to discuss the main challenges founded while performing pentesting. For this, an exploratory study was conducted with five pentesting tools and seven Web applications. We analyzed and executed these tools and applications, and identified and evaluated some of their characteristics and functionalities. Preliminary results showed that one of the major challenges relates to pentesting tools execution in Web applications is the poor standardization of input parameters in the authentication process.