Manual Application Security Testing

VerSprite conducts manual security testing of web presence in order to identify application flaws around authentication, vulnerabilities from web frameworks, injection mitigation, malicious file uploads, and other types of web-based attacks. The manual application security threat analysis will include, but are not limited to, the following areas:

Web-related misconfiguration flaw(s)
System/network level insecurity or vulnerabilities that could be exploited
Authentication by-pass flaws in web applications or APIs
Business disruption
Privilege/ role escalation
Information leakage
Poor architecture considerations for network/ data security
Administrative access violations
Other areas covered by web frameworks like the OWASP Top Ten (2017 edition)

Identify Security Flaws in the Application Using Manual Penetration Testing

Identify vulnerabilities found within the web application - bugs in the application, an injection (SQL/ script code), or the presence of viruses.

URL Manipulation - Some web applications communicate additional information between the client (browser) and the server in the URL. Changing some information in the URL may sometimes lead to unintended behavior by the server and this termed as URL Manipulation. SQL injection - This is the process of inserting SQL statements through the web application user interface into some query that is then executed by the server. XSS (Cross-Site Scripting) - When a user inserts HTML/ client-side script in the user interface of a web application, this insertion is visible to other users and it is termed as XSS. Spoofing - The creation of hoax look-alike websites or emails is called Spoofing.

Security Flaws

Web-related misconfiguration flaw(s)
System/network level insecurity or vulnerabilities that could be exploited
Authentication by-pass flaws in web applications or APIs
Business disruption
Privilege/ role escalation
Information leakage
Poor architecture considerations for network/ data security
Administrative access violations
Other areas covered by web frameworks like the OWASP Top Ten (2017 edition)

The manual application security threat analysis will include, but are not limited to, the following areas:

Web-related misconfiguration flaw(s)
System/network level insecurity or vulnerabilities that could be exploited
Authentication by-pass flaws in web applications or APIs
Business disruption
Privilege/ role escalation
Information leakage
Poor architecture considerations for network/ data security
Administrative access violations
Other areas covered by web frameworks like the OWASP Top Ten (2017 edition)

Manual Web Application Security Testing

Identify Security Flaws in the Application Using Manual Penetration Testing

Identify Security Flaws in the Application Using Manual Penetration Testing

Security Flaws