27-10-2014, 09:47 AM
Abstracts: Techdefence Pvt. Ltd. is basically a Cyber Security Company. This Company trains students of colleges, schools and also employees of big companies all over the India. This company also accepts the penetration testing project from their clients and provide them with proper results. In this modern world of internet, security to everything is must. Every company that runs a web application for business as well as personal purpose, needs security. So, security testing is must for each and every companies whether it is small or big. Thus, a good online tool for testing is must which I am building as my project. This company offered me a project to build automatic penetration testing that works online on PHP platform. So, I will try to cover OWASP’s (Open Web Application Security Project) top 10 vulnerability scanning automatically on my web application. This Web Application is going to work as follows: 1) Client needs to provide his website’s web address or say URL in our web application in order to conduct penetration testing on his website. 2) Web application will test his/her full website for the major attacks like : ? Authentication Bypass ? Union Based SQL Injection (SQLi) ? Web Application Firewall Bypass ? Cross Site Scripting (XSS) ? Unvalidated Redirects and etc. 3) After scanning, the web application will show results whether any attacks can be applied or not. I will also try to include features like free test and premium test. I will use PHP as a web programming language and MySQL as database.