Web Application Penetration Testing: An Introduction

Web application penetration testing always requires good preparation. Defining the customer's scope and expectations is essential for a successful test session. In addition to manual testing, automated tools are always used to help find the "low-hanging fruit". What is most important, however, is the tester's intuition.This paper was written in 2019 as part of a research project at scip AG, Switzerland. It was initially published online at https://www.scip.ch/en/?labs.20191024 and is available in English and German. Providing our clients with innovative research for the information technology of the future is an essential part of our company culture