VulScan: A Web-Based Vulnerability Multi-Scanner for Web Application
Tobias Osemegbe Odion, Ife Olalekan Ebo, Rajab Mohammed Imam, Abdullahi Isa Ahmed, Usman Nuhu Musa · 2023
Web application is becoming more powerful and widely used as more people are accessing it. However, web application attacks have become an ongoing problem as a result of one or more vulnerabilities that may be present. Most researchers have been able to propose solutions capable of handling specific attacks, which are not capable of identifying the vulnerabilities present in today's dynamic web applications. Hence, the proposed system named “Vulnerability Scanner (VulScan)” has the ability to identify six distinct categories of attacks that web applications may be susceptible to. The system uses an authenticated scanning approach to scan web application components such as links, forms, headers etc., and reports susceptible vulnerabilities. The detection capability of VulScan was evaluated on Damn Vulnerable Web Application (DVWA) and live web applications.