Identifying The Usage Of Known Vulnerabilities Components Based On OWASP A9

Penetration testing is gaining its popularity in the current generation as there has been evidences where the hacker have broken the system. There are standards that are available in the market which help the entire software industry to overcome such scenarios. One of the non-profit organization is Open Web Application Security Project (OWASP). Penetration testing or we say as ethical hacking is one of the important activity in the Cyber Security domain. In this paper we will be discussion about the well-known vulnerability defined by OWASP 2017 which stands in number 9 or A9 in the list i.e. “using components of with known vulnerabilities”. The reason for bringing up this topic is because A9 vulnerability is very frequently seen as per my experience in the pen testing. We will be discussing about how to identity the known vulnerability in a web application from hacker point of view and how remediation would help the developer to close the vulnerability. Please note the practicality that is discussed in this paper should only be performed prior the approval of the application owner.