Penetracijsko testiranje web aplikacija korištenjem neizrazitih tehnika

Višković, Konrad

prikaz prve stranice dokumenta Penetracijsko testiranje web aplikacija korištenjem neizrazitih tehnika

Download
PDF 2.93 MB

professional thesis

Penetracijsko testiranje web aplikacija korištenjem neizrazitih tehnika

Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2021. urn:nbn:hr:168:529438

Višković, Konrad

University of Zagreb
Faculty of Electrical Engineering and Computing

Cite this document

APA 6th Edition

Višković, K. (2021). Penetracijsko testiranje web aplikacija korištenjem neizrazitih tehnika (Professional thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:529438

MLA 8th Edition

Višković, Konrad. "Penetracijsko testiranje web aplikacija korištenjem neizrazitih tehnika." Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2021. https://urn.nsk.hr/urn:nbn:hr:168:529438

Chicago 17th Edition

Višković, Konrad. "Penetracijsko testiranje web aplikacija korištenjem neizrazitih tehnika." Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2021. https://urn.nsk.hr/urn:nbn:hr:168:529438

Harvard

Višković, K. (2021). 'Penetracijsko testiranje web aplikacija korištenjem neizrazitih tehnika', Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 24 December 2024, https://urn.nsk.hr/urn:nbn:hr:168:529438

Vancouver

Višković K. Penetracijsko testiranje web aplikacija korištenjem neizrazitih tehnika [Professional thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2021 [cited 2024 December 24] Available at: https://urn.nsk.hr/urn:nbn:hr:168:529438

IEEE

K. Višković, "Penetracijsko testiranje web aplikacija korištenjem neizrazitih tehnika", Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2021. Available at: https://urn.nsk.hr/urn:nbn:hr:168:529438

Cite this item: https://urn.nsk.hr/urn:nbn:hr:168:529438

Please login to the repository to save this object to your list.

Metadata

Title	Penetracijsko testiranje web aplikacija korištenjem neizrazitih tehnika
Title (english)	Penetration testing of web applications using fuzzing techniques
Author	Konrad Višković
Mentor	Marin Vuković (mentor)
Committee member	Miljenko Mikuc (predsjednik povjerenstva)
Committee member	Marin Vuković (član povjerenstva)
Committee member	Krešimir Grgić (član povjerenstva)
Granter	University of Zagreb Faculty of Electrical Engineering and Computing Zagreb
Defense date and country	2021, Croatia
Scientific / art field, discipline and subdiscipline	TECHNICAL SCIENCES Computing
Abstract	Područje specijalističkog rada obuhvaća pregled najčešćih ranjivosti web aplikacija te opis postupka ispitivanja ranjivosti web aplikacija slijedeći metodu zajednice OWASP. Opisan je općeniti algoritam za neizrazito ispitivanje koji se može koristiti za ispitivanje navedenih ranjivosti. Opisana je podjela alata za neizrazito ispitivanje i dan je primjer arhitekture takvog alata. Opisan je posrednički poslužitelj Mitmproxy. U okviru rada ostvareno je programsko rješenje za neizrazito ispitivanje korištenjem napada grubom silom, prikazan je primjer njegove upotrebe i dane su smjernice za daljnji razvoj.
Abstract (english)	The area of specialization includes a description of the most common web application vulnerabilities. It describes the web application testing process following the OWASP method. It provides description of a general fuzzing algorithm able to detect said vulnerabilities. The paper describes classification of fuzzing tools and provides an architecture overview. The paper contains an overview of the Mitmproxy proxy tool. It provides a description and implementation of a simple fuzzing tool used for brute force testing and provides guidelines for further development.
Keywords
Keywords (english)
Language	croatian
URN:NBN	urn:nbn:hr:168:529438
Study programme	Title: Specialist study programme in information security Study programme type: university Study level: postgraduate specialist Academic / professional title: Specijalist informacijske sigurnosti (Specijalist informacijske sigurnosti)
Type of resource	Text
File origin	Born digital
Access conditions	Open access
Terms of use
Repository	FER Repository
Created on	2022-07-01 07:07:16