Penetrační testování webových aplikací

Abstract

This work addresses problematics of web application security. At the beginning of the thesis is the research of the current state of penetration testing. The theoretical part of work describes the concept of penetration testing itself, its types, advantages and disadvantages as well as several standards that are closely related to this type of security testing. Part of the thesis is also an analysis of several reports on vulnerabilities in web applications, from which the most frequent ones are selected. All the selected vulnerabilities are described in theory and then practically demonstrated on a prepared web application where defense mechanisms are also presented. The output of this work is a simple penetration tool and set of recommendations for a secure web application implementation.