Web Application Testing
Assessments of web applications are usually performed from the perspective of unauthorized and authorized users, with the first goal of ensuring known vulnerabilities in the web servers, application servers, and databases are not present. Immunity then checks the application for standard problems similar to those described in the OWASP testing guidelines.
Immunity
always includes extensive testing for the presence of SQL or command
injection vulnerabilities that allow unauthorized access to database
systems. Web applications are also analyzed for other vulnerabilities
that could cause information leakage, unauthorized access, or
privilege escalation.
















