liu.seSearch for publications in DiVA
Change search
ReferencesLink to record
Permanent link

Direct link
Generating web applications containing XSS and CSRF vulnerabilities
Linköping University, Department of Computer and Information Science, Database and information techniques. Linköping University, The Institute of Technology.
2014 (English)Independent thesis Advanced level (degree of Master (Two Years)), 20 credits / 30 HE creditsStudent thesis
Abstract [en]

Most of the people in the industrial world are using several web applications every day. Many of those web applications contain vulnerabilities that can allow attackers to steal sensitive data from the web application's users. One way to detect these vulnerabilities is to have a penetration tester examine the web application. A common way to train penetration testers to find vulnerabilities is to challenge them with realistic web applications that contain vulnerabilities. The penetration tester's assignment is to try to locate and exploit the vulnerabilities in the web application. Training on the same web application twice will not provide any new challenges to the penetration tester, because the penetration tester already knows how to exploit all the vulnerabilities in the web application. Therefore, a vast number of web applications and variants of web applications are needed to train on.

This thesis describes a tool designed and developed to automatically generate vulnerable web applications. First a web application is prepared, so that the tool can generate a vulnerable version of the web application. The tool injects Cross Site Scripting (XSS) and Cross Site Request Forgery (CSRF) vulnerabilities in prepared web applications. Different variations of the same vulnerability can also be injected, so that different methods are needed to exploit the vulnerability depending on the variation. A purpose of the tool is that it should generate web applications which shall be used to train penetration testers, and some of the vulnerabilities the tool can inject, cannot be detected by current free web application vulnerability scanners, and would thus need to be detected by a penetration tester.

To inject the vulnerabilities, the tool uses abstract syntax trees and taint analysis to detect where vulnerabilities can be injected in the prepared web applications.

Tests confirm that web application vulnerability scanners cannot find all the vulnerabilities on the web applications which have been generated by the tool.

Place, publisher, year, edition, pages
2014. , 52 p.
Keyword [en]
Web security, CSRF, XSS, Cross Site Request Forgery, Cross Site Scripting, Taint analysis, vulnerability, generating web applications
National Category
Computer Science
URN: urn:nbn:se:liu:diva-111652ISRN: LIU-IDA/LITH-EX-A--14/054—SEOAI: diva2:758641
Subject / course
Computer Engineering
2014-09-26, Muhammad al-Khwarizmi, 10:15 (Swedish)
Available from: 2014-11-06 Created: 2014-10-27 Last updated: 2014-11-06Bibliographically approved

Open Access in DiVA

Generating web applications containing XSS and CSRF vulnerabilities(1562 kB)581 downloads
File information
File name FULLTEXT01.pdfFile size 1562 kBChecksum SHA-512
Type fulltextMimetype application/pdf

Search in DiVA

By author/editor
Ahlberg, Gustav
By organisation
Database and information techniquesThe Institute of Technology
Computer Science

Search outside of DiVA

GoogleGoogle Scholar
Total: 581 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

Total: 2269 hits
ReferencesLink to record
Permanent link

Direct link