Web application vulnerability
As an ethical hacker, it’s essential to understand web application security and the OWASP Top 10 web application security risks. Web applications are special software that runs on a server to host websites and are easily accessible using a standard web browser. For instance, when you access your favorite search engine, your web browser creates a Hypertext Transfer Protocol (HTTP) or HTTP Secure (HTTPS) GET message to request the resource on the destination web server (the internet search engine). Once the web application receives the HTTP GET message (the request), it processes and provides a response with the requested data back to the web browser:
The following diagram shows the communication between the browser and a web application:
Figure 9.28 – Web communication
Web applications are created with lots of code by developers. However, many web servers on the internet run outdated and insecure web applications...
