Web Unique Method (WUM): An Open Source Blackbox Scanner for Detecting Web Vulnerabilities
Journal Title: International Journal of Advanced Computer Science & Applications - Year 2017, Vol 8, Issue 12
Abstract
The internet has provided a vast range of benefits to society, and empowering people in a variety of ways. Due to incredible growth of Internet usage in past 2 decades, everyday a number of new Web applications are also becoming a part of World Wide Web. The distributed and open nature of internet attracts hackers to interrupt the smooth services of web applications. Some of the famous web application vulnerabilities are SQL Injection, Cross Site Scripting (XSS) and Cross Site request Forgery (CSRF). We believe that in order to encounter these vulnerabilities; the web application vulnerabilities scanner should have strong detection and prevention rules to ease the problem. At present, a number of web application vulnerabilities scanners have been proposed by research community, such as ZED Attack Proxy (ZAP) by AWASP, Wapiti by sourceforge.net and w3af by w3af.org. However, these scanners cannot challenge all web vulnerabilities. This research proposed and develop a vulnerability scanning tool WUM (web unique method) to detection and prevention of all the major instance vulnerabilities and demonstrates how to detect unauthorized access by finding vulnerabilities. With the efficient use of this tool, the developers are able to find potentially vulnerable web application. WUM generated a high level of accuracy and compatibility, which is elaborated underneath. The result of the experiment shows proposed vulnerability scanner tool WUM which gives less false positive and detect more vulnerabilities in comparison of well-known black box scanners.
Authors and Affiliations
Muhammad Noman khalid, Muhammad Iqbal, Muhammad Talha Alam, Vishal Jain, Hira Mirza, Kamran Rasheed
Keywords
Related Articles
- EP ID EP259579
- DOI 10.14569/IJACSA.2017.081254
- Views 59
- Downloads 0
Advanced Metaheuristics-based Tuning of Effective Design Parameters for Model Predictive Control Approach
This paper presents a systematic tuning approach for Model Predictive Control (MPC) parameters’ using an original LabVIEW-implementation of advanced metaheuristics algorithms. Perturbed Particle Swarm Optimization (pPSO)...
A New Shoulder Surfing and Mobile Key-Logging Resistant Graphical Password Scheme for Smart-Held Devices
In globalization of information, internet has played a vital role by providing an easy and fast access of information and systems to remote users. However, with ease for authentic users, it has made information resources...
A New Hidden Web Crawling Approach
Traditional search engines deal with the Surface Web which is a set of Web pages directly accessible through hyperlinks and ignores a large part of the Web called hidden Web which is a great amount of valuable informatio...
A Novel Reconfigurable MMIC Antenna with RF-MEMS Resonator for Radar Application at K and Ka Bands
This paper presents a new reconfigurable antenna based on coplanar waveguide (CPW). The design for reconfigurable antenna is based on monolithic microwave integrate circuit (MMIC). This scheme combines a CPW antenna and...
The Effect of Diversity Implementation on Precision in Multicriteria Collaborative Filtering
This research was triggered by the criticism on the emergence of homogeneity in recommendation within the collaborative filtering based recommender systems that put similarity as the main principle in the algorithm. To o...