Back to projectsCybersecurity

Web Application Penetration Test

OWASP Top 10

Full coverage

Findings

Reproducible

Pre-launch

Fixed before release

Problem

A client needed a pre-release security assessment of a customer-facing web application handling sensitive data.

Solution

Conducted a manual penetration test complemented by automated scanning, covering OWASP Top 10, authentication, authorization, and API endpoints.

Architecture

Reconnaissance (Nmap, Amass) → Automated Scan (OWASP ZAP, Nikto) → Manual Exploitation (Burp Suite) → Privilege Escalation → Reporting & Debrief.

Outcome

Identified exploitable vulnerabilities with reproducible steps and severity ratings, enabling the team to fix issues before launch.

Key Highlights

  • Full OWASP Top 10 coverage with manual exploitation
  • Recon, automated scan, manual exploit, privilege escalation
  • Reproducible steps + severity ratings for every finding
  • Executive summary and technical debrief for the dev team

Technologies

Burp SuiteOWASP ZAPNmapNiktoMetasploit

Want to see more?

Explore other projects

All Projects