search

DevelOpsITU / MiniTwit

Apache License 2.0
4 stars 1 forks source link

Penetration Testing [Internal] #155

Open Lucki2g opened 2 years ago

Lucki2g commented 2 years ago

Try to test for vulnerabilities in your project by using wmap, zaproxy, or any of the tools in the list of OWASP vulnerability scanning tools) Fix at least one vulnerability that you find; ideally one that is high in your prioritization cf. to your risk analysis

DannyDelic commented 2 years ago

Will run the web-app through OWASP ZAP and msfconsole random apps.

ValarMarkhulis commented 2 years ago

Here is a pdf report with the output from OWASP ZAP (zaproxy). ZAP Scanning Report.pdf I have tried to use wmap, but it bugged out and tried to look at the OWASP scanning tool links. The outcome has been described in https://github.com/DevelOpsITU/MiniTwit/wiki/Information-gathered-from-various-security-assesment-tools

ValarMarkhulis commented 2 years ago

@Zavir and I will use this information gathered to work on #154. We still need to decide which vulnerability we want to fix, so this issue is blocked by the risk analysis from #154.