Online Web Application Penetration Testing Tool

Project Title

Online Web Application Penetration Testing Tool

Project Area of Specialization Cyber SecurityProject Summary

OWAPT is an automated web application security testing tool that audits your web applications by checking for vulnerabilities like: 
SQL Injections(SQL)
Cross site scripting (xss) and others.

We will add the crawler module that will itself check all the pages of the website and give the vulnerabilities with their path and solution links.

Project Objectives

The objectives of the project are shown as following:
The ability to detect  SQL Injection
The ability to detect  Login Sequences
The ability to detect  HTTP parameter pollution
The ability to detect  Content Spoofing/Text Injection
The ability to detect  URL Manipulation
The ability to detect  client certificates
The ability to detect  XSS
The ability to detect  Directory enumeration
The ability to detect Open redirect
The ability to detect Click jacking vulnerability

Project Implementation Method

The OWAPT will use the cloud computing technology to provide 7*24 hours of security inspection for user websites.
 

Benefits of the Project

OWAPT will provide automated website security that lets you know the status of any vulnerabilities on your site at any time. Just type in your web address to get started, and on regularly scheduled intervals you'll look over your site to check its security status.

Technical Details of Final Deliverable

In the tool there will be a text box in which the user will put the Url and click on Crawling button. After that user can view the crawling Links,JS,CSS & Images of the website. Now the user can click on the scan button. The scanning button will find all the vulnerabilities of the given website and if it  find any it will place itself in to that level (HIGH,MEDIUM,LOW).
In High Level the vulnerabilities include ( SQL, XSS, LFI).
In medium level the vulnerabilities include (Iframe,CSRF,Directory).
In low level the vulnerabilities include (Email Disclosure, Auto complete, Traffic checker,sitemap.xml)

As the user can see the vulnerabilities  of the given website, the user can also view of how to  fix that vulnerabilities through clicking on the report button .  On clicking on report button there will be report generated of how to remove the vulnerabilities in your website.

Final Deliverable of the Project Software SystemCore Industry ITOther IndustriesCore Technology OthersOther TechnologiesSustainable Development Goals Decent Work and Economic Growth, Partnerships to achieve the GoalRequired Resources

Item Name	Type	No. of Units	Per Unit Cost (in Rs)	Total (in Rs)
			Total in (Rs)	5000
Server/Cloud Server	Miscellaneous	1	5000	5000