WEB APPLICATION VULNERABILITY SCANNER (WAVS)

Abstract

The internet has provided a vast range of benefits to society, and empowering people in a variety of ways. Due to incredible growth of Internet usage in past decades, everyday a number of new Web applications are also becoming a part of World Wide Web. The distributed and open nature of internet attracts hackers to interrupt the smooth services of web applications. Some of the famous web application vulnerabilities are SQL Injection, Cross Site Scripting (XSS) and Cross Site request Forgery (CSRF). We believe that in order to encounter these vulnerabilities; the web application vulnerabilities scanner should have strong detection and prevention rules to ease the problem. The result of the experiment shows proposed vulnerability scanner tool WAVS which gives less false positive and detect more vulnerabilities in comparison of well-known black box scanners. Web application system based on Net The system being developed will be framework using PYTHON. It is an "SCANNER" tool which will be used by IT IT students For Cybersecurity. The basic a project developers, clients and even feature of this website will be to provide a communication channel between a client, seeking a WEB for any vulnerabilities, and the Attacker, seeking for crediential for which they will be paid. The client as well as the Website is required to sign up to the website so they can be considered as the member of the Tool. The Web will have to pass an online test in order to indication of bugs in the online bidding of the projects available on the website. The system will also provide a reporting and discussion board which will be used for communication between the clients, developers and other interested parties, in an effective and efficient manner.