Penetration Testing

Web App Security Testing

• static resource
  • Web server doesn't do any processing and resource is sent directly back to user
• active resource
  • Web server does more extensive processing before sending resource back to user