VGU RESEARCH REPOSITORY
Please use this identifier to cite or link to this item:
https://epub.vgu.edu.vn/handle/dlibvgu/1730
Title: | OWASP most common web-application vulnerabilities | Authors: | Ha Xuan Huy | Keywords: | IT security;Offensive security;OWASP;XSS;CSRF;Broken access control;SQLi;Automation security | Issue Date: | 2022 | Publisher: | Vietnamese-German University | Abstract: | Nowadays, due to the huge demand for Internet usage, plus the fact that there are more and more cyberattacks that heavily damage organizations and their users, the need for IT Security has increased significantly over the years. To prevent such cyberattacks, every security specialist needs to understand the key concepts of Offensive Security, which are the OWASP-based webapplication vulnerabilities. This study aims to cover concepts and knowledge of four common OWASP security vulnerabilities, which are XSS, CSRF, Broken Access Control, and SQLi, from basic to advanced level. For each listed vulnerability, basic definitions, types of attacks and examples will be included. Practical demo labs to show exploiting steps will also be conducted, and for each lab, personal evaluations will be presented. More importantly, the focus part of this study lies on the defense mechanisms of each vulnerability and corresponding bypassing techniques. An automated XSS scanner will also be developed to present the fundamentals of automation in Offensive Security. In general, this thesis tries to cover every aspect of each mentioned OWASP vulnerability. Furthermore, Automation Security will be briefly introduced, and an automated XSS scanner will be developed as an example. |
URI(1): | https://epub.vgu.edu.vn/handle/dlibvgu/1730 | Rights: | Attribution-NonCommercial 4.0 International |
Appears in Collections: | Computer Science (CS) |
Files in This Item:
File | Description | Size | Format | Existing users please Login |
---|---|---|---|---|
OWASP most common web-application vulnerabilities.pdf | 3.47 MB | Adobe PDF |
Page view(s)
16
checked on May 29, 2024
Download(s)
6
checked on May 29, 2024
Google ScholarTM
Check
This item is licensed under a Creative Commons License