Introduction
A assessment phase is the process of finding vulnerabilities on target machines.
Performing vulnerability assessment simultaneously on web applications and the network together can be more useful as you will correlate different vulnerabilities and information gathered from network infrastructure and other protocols, such as SSH, telnet, databases, SNMP, SMB, and FTP. This will give you a better understanding of the purpose of the specific web application and its use within the organization.
However, to make things easier for the audience, we will specifically cover tools and techniques to perform vulnerability assessments on web applications. The recipes in this chapter are structured to enable you to find all the tools and techniques required for scanning and locating vulnerabilities within a web application in one place.
The vulnerability assessment phase is like a preparation phase in which we will find the vulnerabilities. To ensure that we find all the possible vulnerabilities...