Nástroj pro penetrační testování webových aplikací

Abstract

This thesis deals with the issue of penetration testing in the area of web application security. The aim of the first part is to introduce the reader to the topic of penetration testing and security vulnerabilities of web applications. These theoretical findings are further applied in the analysis of the current state of web application security and in the rest of the thesis. Due to the extensiveness of the topic of penetration testing, the second part of the thesis focuses on the narrower issues of using third-party libraries and spreading of malicious code in JavaScript language. The practical part of the thesis designs solution of this specific issue and provides comparison between the developed application and existing penetration tools. Thanks to the experience and information gained during the research, the last part is devoted to recommended procedures for integration of third-party libraries.