Dickson Godwin Massawe

CHOMBEZA: A Behaviour Confirming Vulnerability Assessment Toolkit for Web Application Penetration Testing

Automated web application vulnerability scanners are widely used in penetration testing and bug bounty work, yet many of them report on the basis of pattern matching, which produces high false positive rates and forces the tester to re verify every finding by hand. This paper pre...