Security & Penetration Testing of Web Application
Preferred learners
- Canada
- Academic experience
Categories
Skills
Project scope
- What is the main goal for this project?
-
Our company has a website / technology product. A standard practice for web based tools is to conduct what is known as penetration tests.
We would like a group of students to design and perform a pen test on our application, involving:
- Students become familiar with our product and understand generally how it works.
- Students should spend time conducting research on state of the art pen testing technologies. They should look into common vulnerability lists such as OWASP Top 10, and common security tools such as Nmap, Burp Suitar, Nessus, and Wireshark.
- Students should have a written attack plan and present it to us
- Students are free to attack our product as per the presented plan.
- What tasks will learners need to complete to achieve the project goal?
-
After testing is complete, the final deliverable should be a written report detailing how the test was conducted, what tests passed, what tests failed, recommendations for mitigation strategies, and any further notes from the testers. Other items to consider for a final report should be:
- An executive summary detailing overview, timeline, key findings.
- Categorizing all findings into vulnerability levels such as critical, high, medium, low.
- High detailed summaries of any findings.
- Low detailed summaries of any tests conducted with no findings.
- A recap of any tools used.
- What is the main goal for this project?
-
Our company has a website / technology product. A standard practice for web based tools is to conduct what is known as penetration tests.
We would like a group of students to design and perform a pen test on our application, involving:
- Students become familiar with our product and understand generally how it works.
- Students should spend time conducting research on state of the art pen testing technologies. They should look into common vulnerability lists such as OWASP Top 10, and common security tools such as Nmap, Burp Suitar, Nessus, and Wireshark.
- Students should have a written attack plan and present it to us
- Students are free to attack our product as per the presented plan.
- What tasks will learners need to complete to achieve the project goal?
-
After testing is complete, the final deliverable should be a written report detailing how the test was conducted, what tests passed, what tests failed, recommendations for mitigation strategies, and any further notes from the testers. Other items to consider for a final report should be:
- An executive summary detailing overview, timeline, key findings.
- Categorizing all findings into vulnerability levels such as critical, high, medium, low.
- High detailed summaries of any findings.
- Low detailed summaries of any tests conducted with no findings.
- A recap of any tools used.
About the company
- https://youthinpolitics.net/
- 2 - 10 employees
- Government, Non-profit, philanthropic & civil society, Media & production
Youth In Politics is a registered non-for-profit student organization, with the goal of informing youth about politics and current events through journalism, podcasts, and interviews with political figures. Our roster of guests includes; Mary Simons, Kim Campbell, Andrea Horwath, Erin O’Toole, Amarjeet Sohi, etc. Youth In Politics started as a way to encourage youth to be involved in politics and find social gratification from being involved. Our end goal is to play an important role in increasing youth votership every election. We have writers and members from all over the world, with most based in Canada. Our organization has been profiled by CBC News, CP24, etc. Youth In Politics has also been recognized by the UN world food program, for our efforts when it came to covering the Yemen crisis.