W3BnNr: An Automated tool for information gathering, vulnerability scanning, attacking and reporting for injection attacks on web application

Web applications must be protected from security threats due to the widespread use of the internet and web applications in today's society. In fact, over 75 percent of currently available online apps have at least one defect, of which 24 percent are regarded as serious flaws. In recent years, the number of web application attacks has increased by 88 percent, more than double the year-over-year growth rate. Injection attacks are the third most serious security risk to a web application, according to OWASP, as 94 percent of apps have been tested for some kind of injection vulnerability. Injection attacks include the attacker sending an application a malicious or untrusted input that the program interprets as a component of a valid query, code, or request. Too many web application vulnerabilities are a result of input validation problems. Unfortunately, these issues arise due to developers or users who are not security-aware, leaving several web applications on the internet vulnerable to attacks. To solve the underlying issue, we have proposed a tool that does automatic crawls, and scans for injection vulnerabilities such as SQL Injection, Cross Site Scripting, etc., which we later use for exploitation and reporting purposes.