This presentation introduces common web vulnerabilities and tools for analyzing them. It aims to raise awareness of software quality issues rather than enable harm. The objectives are to define top vulnerabilities, review vulnerability scanning and analysis tools in a demonstration, and analyze the results report. Web vulnerabilities are widespread, with thousands of attack sites and hundreds of thousands of infected sites discovered monthly. The presentation establishes that no software is completely secure and emphasizes maintaining a high level of security through understanding vulnerabilities and using analysis tools.

1. Exploring Web Vulnerabilities

2. Purpose Of This Presentation
For Awareness in Software Quality
Strictly not for wrong use, I hope that you will
be using it for SQA purpose and not to
damage or harm any one’s
intellectual
property

3. Vote of thanks
• ITS Nepal
• BRAINDIGIT IT Solution
• OWASP
• OWASP Nepal
• SQA Professionals

4. Objectives
• Introduction
• Top vulnerabilities
• Top Tools
• Demo (vulnerability scanning and analysis)
• Analysis of report

6. Nearly 11K Attack sites are
discovered monthly
Nearly 150 K Infected sites are
Discovered Monthly
Ie nearly 5000 sites are infected daily
Ie nearly 3 sites are infected per minute

8. Introduction
• No software is 100% bug free
• So as your site is
• Difference is in level of security maintained

9. Lock Demonstration
1st lock is the simplest lock that can be broken easily and by huge mass of people(x).
2nd lock is bit more complex and can be broken by(x-10,000) no of people.
3rd lock is most complex and can be broken by few people on earth lets say 2 people

10. Familiar words

11. Tools

12. Demo
• With joomscan
• With Acunetix

13. LET’S ANALYSIS
THE REOPRT WE HAVE NOW

14. The Hard Part
Analysing the report of Automation
(15-500 pgs)
Analysing False Positives and Negatives
(everything seems true)
N
Fixing
The Holes

15. Web security
Doesn't only depend on Security of servers
Or Security of Application
But to
Whole Echo System of WEB
Let’s Try More with our
little knowledge

16. Thanking You