Skip navigation


  • DSpace logo
  • Home
  • Collections
  • Researcher Profile
  • Explore by
    • Researcher Profile
  • VGU library
  • Help
  • User Guide
  • Sign on to:
    • My DSpace
    • Receive email
      updates
    • Edit Account details

VGU RESEARCH REPOSITORY


Please use this identifier to cite or link to this item: https://epub.vgu.edu.vn/handle/dlibvgu/1750
DC FieldValueLanguage
dc.contributor.authorNguyen Toan Trangen_US
dc.date.accessioned2023-10-26T08:54:41Z-
dc.date.available2023-10-26T08:54:41Z-
dc.date.issued2022-
dc.identifier.urihttps://epub.vgu.edu.vn/handle/dlibvgu/1750-
dc.description.abstractWeb applications are becoming more interactive and more flexible for users to access any features. Recently, web applications distributed across various servers communicate with back-end utilities, including the innovation of an application programming interface that enables two software components to interact. Web applications nowadays with more specific functionality and require more information in the front-end rendering out the interactive look for the user; thus, there is also a need for security formation between connected software components. In order to ensure the security quality of the web applications, a penetration test could implement focused on API calls that could be exploitable due to flaw logical development between two interactive components. This thesis will discuss about two API vulnerabilities (Broken Object Level Authorization and Broken Authentication) and the different types as well as test phases of penetration testing. The thesis will perform penetration assessment using Penetration Testing Execution Standard to identify and exploit vulnerabilities on OWASP Juice Shop. In result, the thesis indicates the systematic and scientific approach to perform assessment of risk factor in web application development. In the end, theoretical approach defense mechanism and proper implementation methodologies based on OWASP guidelines for vulnerabilities.en_US
dc.language.isoenen_US
dc.rightsAttribution-NonCommercial 4.0 International*
dc.rights.urihttps://creativecommons.org/licenses/by-nc/4.0/*
dc.titleAPI penetration testing for web applicationen_US
dc.typeThesisen_US
item.grantfulltextrestricted-
item.fulltextWith Fulltext-
item.languageiso639-1other-
Appears in Collections:Computer Science (CS)
Files in This Item:
File Description SizeFormat Existing users please Login
API penetration testing for web application.pdf2.79 MBAdobe PDF
Show simple item record

Page view(s)

54
checked on Aug 23, 2025

Download(s)

27
checked on Aug 23, 2025

Google ScholarTM

Check


This item is licensed under a Creative Commons License Creative Commons

© Copyright 2020 by Vietnamese - German University Library.
Add: Ring road 4, Quarter 4, Thoi Hoa Ward, Ben Cat City, Binh Duong Province
Tel.:(0274) 222 0990. Ext.: 70206