Automated Penetration Tests

ARPT (Automated Rapid Penetration Testing

At times, due to specific requirements of meeting project timelines, our team uses the ARPT (Automated Rapid Penetration Testing) methodology. During this process, various tools are used. These automatic tools are developed by the skilled information security analysts and security researchers and are mostly open source tools, commercial grade toolkits and or developed in-house at Vulnerability Laboratory Research.

Since automated testing may tend to produce false positives, our penetration testing team double checks every single entry in the report manually to ensure that all highlighted bugs are valid. This improves the quality of work that we do and helps us deliver our job professionally and up to the client's satisfaction. Our team is not dependent on any specific tools and scanners. The tools used in an automated penetration test always depend on the scope of work of each project.

The type of tests may vary according to the client's scope of work however listed below is a generic list of tests that our team performs during the automatic penetration testing.

• Authentication
• Authorization
• Session State Management
• Input Validation
• Web datastores
• XML/SOAP web services
• Web application management
• Known Vulnerabilities
• Unvalidated Input
• Broken Access Control
• Broken Authentication and Session Management
• Web Session Flaws & Vulnerabilities
• Cross Site Scripting (XSS) Flaws
• Classic Buffer Overflows
• Script Code Injection Flaws
• SQL Injection Flaws
• Format Strings
• Stack- & Heap- Overflow
• Improper Error Handling
• Insecure Storage
• Denial of Service
• Insecure Configuration Management