Research the web application penetration testing procedure, testing

Abstract

With the development of digital technology, more and more businesses, individuals and organizations apply digital models by deploying software and websites for business models. Therefore, it is an important issue for organizations to care about business and customer data that can be exploited and stolen by hackers as well as other malicious purposes. To ensure as well as reduce the risks of this problem, websites and applications need to be security tested by penetration tester and useful tools. There are many attack vectors to exploit web application vulnerabilities such as Cross site scripting, SQL Injection, Security Misconfiguration, Using Components with Known Vulnerabilities, etc. so for each attack vector, the penetration tester will exploit manually or use specific tools developed by individuals or organizations.