Scribd
Upload
37 views6 pages

Cyhex VAPT Report

The vulnerability assessment and penetration testing report for cyhex's web application, conducted on 29 September 2024, identifies various vulnerabilities categorized as Critical, Medium, and Low. The assessment utilized both automated tools and manual testing methods, including Burp Suite, Nessus, and OWASP ZAP. Recommendations for remediation are provided to mitigate the identified security risks.

Uploaded by

RATAN THE ARTIST
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
37 views6 pages

Cyhex VAPT Report

The vulnerability assessment and penetration testing report for cyhex's web application, conducted on 29 September 2024, identifies various vulnerabilities categorized as Critical, Medium, and Low. The assessment utilized both automated tools and manual testing methods, including Burp Suite, Nessus, and OWASP ZAP. Recommendations for remediation are provided to mitigate the identified security risks.

Uploaded by

RATAN THE ARTIST
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 6

Vulnerability Assessment and Penetration Testing

Web Application Security Report

Client Name: cyhex


Domain: nic.com
Date: 29 September 2024
1. Executive Summary
cyhex conducted a penetration test on their Web Application in the production environment,
starting on 29 September 2024. This assessment, combining automated tools and manual check
weaknesses in the application that could be exploited. The report details the identified vulnerabilit
their severity, and provides recommendations to mitigate any security risks they might pose.
2. Checklist
- Objective: Identify vulnerabilities
- Scope: Web Application Security
- Methodology: Automated and Manual Testing
- Tools Used: Burp Suite, Nessus, OWASP ZAP
3. Scope
The scope included the following IP Addresses / Systems for vulnerability scanning and penetrati
- nic.com/login
- nic.com/search
4. Conclusions
5. Findings
The above Application shows vulnerabilities, which include Critical, Medium & Low vulnerabilities
Hence, cyhex needs to work on strengthening its URL/Web App’s by implementing the remediatio
6. Tools Used
- Burp Suite (Licensed)
- Nessus (Licensed)
- OWASP ZAP
- Kali Linux (Open Source)

You might also like