Vulnerability Detection and Assessment for SQL Injection, Cross-site Scripting, and Other Common Vulnerabilities

The world is becoming increasingly interconnected and digital. Immense amounts of data is produced whenever any task is carried out online which can give crucial information about the lives of individuals. This may include personally identifiable information (PII) which can be name, address, Aadhar number, medical records, etc. Loss of PII can lead to financial, regulatory, and reputational damages which lead to an indispensable need to protect this data, giving rise to the need of cybersecurity. Cybersecurity refers to the methods and practices which are undertaken to protect the digital or cyber space from attacks which may be unintentional or malicious. The main aim is to protect the critical systems and the crucial data. The practice of assessing security risks in software systems through vulnerability testing, also known as vulnerability assessment, lowers the likelihood of threats. The solution presented aims at creating a tool to help in the process of vulnerability assessment and detection by providing an approach to be followed. The solution will work on two fronts: end points and web security. The solution will also provide an interface for deciding between these two fronts. On the side of end point security, the solution will detect specifications of the end point. These specifications may include operating system, open ports, etc. The solution would then list the possible vulnerabilities relating to the specifications. The solution would map these specifications to the Common Vulnerabilities and Exposures (CVEs) database. On the side of web security, the solution is intended to help in detecting if a website is vulnerable to various attacks. The solution is intended to work for SQL injection and cross-site scripting, cross-site request forgery, and others.