Posts

Showing posts from September, 2018

Program

import java.io.*; import java.util.HashMap; import java.util.concurrent.TimeUnit; public class AssetFinder {     static String fileName = "input.txt";       String line = null;       static String url="";       static HashMap<String,String> data=new HashMap<String,String>();       public static void main(String [] args)     {      AssetFinder asset=new AssetFinder();      url=args[0];      asset.readid(fileName);      asset.fetch(data);      asset.writedetails(data);                   }       public void readid(String fileName)     {    {             // FileReader reads text files in the default encoding.    try {         BufferedReader buffere...
A high-level security scan that uses automated tools to identify common vulnerabilities within running web applications or web services without the need for source code. DAST(Dynamic Application Security Testing) is a security testing methodology in which an application is tested from the outside in by examining an application in its running state and trying to attack it just like an attacker would. How it works: DAST scanners first crawl a web application before scanning it. This step finds all exposed inputs on pages within the web application, which are then subsequently tested for a range of vulnerabilities. SAST (Static Application Security Testing) is a white-box testing methodology which tests the application from the inside out by examining its source code for conditions that indicate a security vulnerability might be present. Advantage and Disadvantages: Technology Coverage: SAST scanners need to not only support the language (PHP, C#/ASP.NET, Java, Python, etc...