公开(公告)号：US20180349613A1

公开(公告)日：2018-12-06

申请号：US15775324

申请日：2015-11-13

Applicant: ENTIT SOFTWARE LLC

Inventor： Gerald Sullivan ,  Sasi Siddharth Muthurajan ,  Nidhi Govindram Kejriwal ,  Jeremy Brooks

IPC: G06F21/57 ,  G06F21/55 ,  G06F21/62

CPC classification number: G06F21/577

Abstract: Examples relate to automated multi-credential assessment in a system. One example enables auditing an application by sending a first request for an action to be performed in the application, the first request based on a first privilege level, where the first privilege level corresponds with a first level of access to the application, and sending a second request for the action to be performed in the application, where the second request based on a second privilege level different from the first privilege level. The second privilege level may corresponds with a second level of access to the application different from the first level of access. The first request and second request may be performed, and the results of the performed first request and second request may be combined. The combined results may be made available.

公开(公告)号：US20180330099A1

公开(公告)日：2018-11-15

申请号：US15775198

申请日：2015-11-13

Applicant: ENTIT SOFTWARE LLC

Inventor： Jeremy Brooks ,  Sasi Siddharth Muthurajan ,  Nidhi Govindram Kejriwal

IPC: G06F21/57 ,  G06F17/30 ,  G06F21/55

CPC classification number: G06F21/577 ,  G06F17/30598 ,  G06F21/12 ,  G06F21/552 ,  G06F2221/033

Abstract: Examples relate to detecting vulnerabilities in a web application. One example enables identifying a set of inputs in a web application input form. The set of inputs may be categorized based on a set of predetermined conditions. The set of inputs may be scored based on the categorization. A subset of the set of inputs may be determined to be a set of parameters of interest for the web application based on the scored set of inputs.

公开(公告)号：US10891381B2

公开(公告)日：2021-01-12

申请号：US15775198

申请日：2015-11-13

Applicant: ENTIT SOFTWARE LLC

Inventor： Jeremy Brooks ,  Sasi Siddharth Muthurajan ,  Nidhi Govindram Kejriwal

IPC: G06F21/00 ,  G06F21/57 ,  G06F16/28 ,  G06F21/55 ,  G06F21/12

Abstract: Examples relate to detecting vulnerabilities in a web application. One example enables identifying a set of inputs in a web application input form. The set of inputs may be categorized based on a set of predetermined conditions. The set of inputs may be scored based on the categorization. A subset of the set of inputs may be determined to be a set of parameters of interest for the web application based on the scored set of inputs.