Performance Analysis of Vulnerability Detection Tools and Techniques

In today's world security is a major concern. To strengthen security, organizations are investing huge amounts of money for incorporating different tools and techniques. Penetration testing is one of the security measures used to test the security of the system. Penetration testing is a procedure to identify vulnerabilities in the system by using different testing tools like BrupSuite, DirBuster, SQLMap, cURL, etc. This paper identifies the best penetration testing tool based on the study of different parameters, like multi-threading at over 6000 requests/sec, cross-platform supportiveness, ability to work over both HTTP and HTTPS, capability to support all databases, automatic recognition of password hash formats, ability to support multiple URLs, to support in crawling website, and to support the parallel transmission. Performance parameter values can be adjusted and tuned while the program is in running condition. After going through a study of all these parameters, it was observed that the DirBuster tool supports seven out of eleven parameters for penetration testing. DirBuster also supports both the Command line interface (CLI) and Graphical user interface (GUI). It is also seamlessly integrated into both Linux and Windows Operating Systems. As per our study, the DirBuster performed well as compared to the other tools of the same domain like BrupSuite, DirBuster, SQLMap, and cURL.