2. Security (Penetration) testing is used to test the
integrity of a web-site against common attacks
that come from “outside” in a matter of security
2
3. The role of this testing method is to identify and
fix potential holes in order to stop or prevent
attacks that can be harmful to the web site.
3
4. By understanding and simulating real attacks the
IT team can prevent later attacks on a larger
scale.
4
5. No configuration is necessary for this presentation
We will present a tool that does several checks on
log in page, Netsparker, that can be found here.
5
6. Among points we intend to touch:
Authentication
Redirect
Hidden code, tags, titles, links
iFrame
Cookies
6