Automated Extension-Based Penetration Testing for Web Vulnerabilities
Areej Abdullah Alhogail, Mohammed Ali Alkahtani · Procedia Computer Science · 2024
Depending on manual solutions for finding security vulnerabilities in web applications is time-consuming, error-prone, and requires high levels of expertise. This paper proposes a model for an automated extension-based penetration testing for web vulnerabilities that is compatible with any web application. It consists of three stages that start with information gathering, followed by a vulnerability assessment process to test for exploit. The results are then automatically generated as a report at the conclusion. To examine the model, a tool is developed based on the suggested model. Results demonstrate that the proposed technique has effectively and promptly identified application’s vulnerabilities.