VGU RESEARCH REPOSITORY
Please use this identifier to cite or link to this item:
https://epub.vgu.edu.vn/handle/dlibvgu/1750
Title: | API penetration testing for web application | Authors: | Nguyen Toan Trang | Issue Date: | 2022 | Abstract: | Web applications are becoming more interactive and more flexible for users to access any features. Recently, web applications distributed across various servers communicate with back-end utilities, including the innovation of an application programming interface that enables two software components to interact. Web applications nowadays with more specific functionality and require more information in the front-end rendering out the interactive look for the user; thus, there is also a need for security formation between connected software components. In order to ensure the security quality of the web applications, a penetration test could implement focused on API calls that could be exploitable due to flaw logical development between two interactive components. This thesis will discuss about two API vulnerabilities (Broken Object Level Authorization and Broken Authentication) and the different types as well as test phases of penetration testing. The thesis will perform penetration assessment using Penetration Testing Execution Standard to identify and exploit vulnerabilities on OWASP Juice Shop. In result, the thesis indicates the systematic and scientific approach to perform assessment of risk factor in web application development. In the end, theoretical approach defense mechanism and proper implementation methodologies based on OWASP guidelines for vulnerabilities. |
URI(1): | https://epub.vgu.edu.vn/handle/dlibvgu/1750 | Rights: | Attribution-ShareAlike 3.0 United States |
Appears in Collections: | Computer Science (CS) |
Files in This Item:
File | Description | Size | Format | Existing users please Login |
---|---|---|---|---|
API penetration testing for web application.pdf | 2.79 MB | Adobe PDF |
This item is licensed under a Creative Commons License