Assessing modern web applications security

Abstract

Aquesta tesi explora i defineix les eines, conceptes i mètodes bàsics per a realitzar una avaluació de la seguretat d'un servei web. També inclou una part pràctica on es duen a terme els mètodes definits.

As web applications and services get more and more popular, the inherent security risks of possible vulnerabilities present in the code and libraries arise. An application web penetration test is an assessment of the security of the code and use of software on which the application runs. Even if all the versions are up-to- date on software patches and security, cybercriminals are constantly evolving their methods. Penetration testing can ensure that a web application is not vulnerable to attacks, and help to avoid compromise. This thesis aims to elaborate a basic but rather complete guide on how to perform an initial web security assessment, describing some of the most popular methods, tools and concepts.