The web application pentest is a technique for testing the security of web applications. The security of a web application is assessed through an active analysis of the weak points.
The aim is to identify and exploit as many vulnerabilities and security gaps as possible. The implementation is similar to a penetration test and aims to infiltrate the web apps with the help of penetration attacks.
Manual or automated test procedures are used to identify vulnerabilities in different areas of a web application. The tests identify known attacks such as B. SQL injection or denial of service attacks carried out on the application. The stability and the integration are checked for durability. The further focus is on session management in order to obtain user data such as the victims’ login data (session hijacking ).
The most important result of the web application pentest is to identify security gaps in the entire web application and its components (source code, database, back-end network) in order to subsequently check the web application for errors and to be able to eliminate weak points.
The end result is a summary of any security gaps or weak points found and an assessment of the impact on the web application. In addition, there is a recommendation of a technical solution to reduce the damage or to remedy the problem.