Uma análise prática das principais vulnerabilidades em aplicações web baseado no top 10 OWASP

Abstract

With the popularization of web applications, security flaws were also emerging and being increasingly exploited by hackers. Within this, OWASP, an internationally recognized entity that seeks to increase the security of software around the world, began to periodically disclose every 4 years a list of vulnerabilities in web applications most targeted by attackers. This list is called Top 10 OWASP, which was used as the basis for this work, which aims to analyze in a practical way, the 10 vulnerabilities disclosed in the most recent Top 10 OWASP at the time of writing this work. The analysis of each vulnerability will be divided into 3 stages, namely: description, demonstration and mitigation. From the detailing of the process behind each problem, at the end of the work a series of topics will be described, which can help developers to validate if their projects in web applications follow the basic principles to be considered safe.