Advantages And Disadvantages Of Vulnerability In Computer Security

INTRODUCTION

In computer security, a vulnerability is a weakness which allows an attacker to reduce a system information assurance. Vulnerability is the intersection of three elements a system susceptibility or flaw, attacker access to the flaw and attacker capability to exploit the flaw.

Web application penetration testing works by using manual or automated penetration tests to identify any vulnerability, security flaws or threats in a web application. The tests involve using any of the known malicious penetration attacks on the application. The penetration tester shows attacks and environment from an attacker’s perspective such as using SQL injection tests. The web application penetration testing key outcome is identify security weakness

• Use the Spider to find ‘hidden’ content

Step 3: Reporting.

• See what issues the Passive Scanner has found

Screenshots The result scanning of vulnerability:-

i. Application Disclosure

ii. Parameter Tampering Figure10: Parameter Tempering Figure11: Alert Parameter Tampering

Remediation • Do not trust client side input and enforce a tight check in the server side.

Vulnerability identified: i. Cookies ii. IP Disclosure Vulnerable URL/Parameters URL: http://localhost/testsite/login.php

Severity: Low

Steps performed to identify the vulnerability: Step 1: Planning

• Configure a browser to proxy via ZAP

• Explore the application manually

Step 2: Exploitation.

• Use the Spider to find ‘hidden’ content

Step 3: Reporting.

• See what issues the Passive Scanner has found

Screenshots The result scanning of vulnerability:-

i. Cookies Figure 12: No HTTPOnly Flag

Figure 13: Alert No HTTPOnly Flag ii. IP Disclosure Figure 14: Private IP Disclosure Figure 14: Alert Private IP Disclosure

Remediation • Ensure that the Http is set for all