A survey on web penetration test

This paper reviews the penetration test specifically in the field of web. For this purpose, it first reviews articles generally on penetration test and its associated methods.Then articles in the field of web penetration test are examined in three aspects: comparing automatic penetration test tools, introduction of new methods or toolsfor manual penetration test, and articles that presented a test environment for training or checking various instrumentsand methods. This article studied 4 different methodologies for web penetration test, 13 articles for comparing web vulnerability scanners, 10 articles that proposed a new method or tool for penetration test and 4 test environments

کلیدواژه ها:

Penetration test ، web scanner ، web application ، web vulnerabilities