Application and Social Engineering Security Audit

This paper addresses the area of web application and social engineering security audits. It describes the conducted audit at the University Science Park TECHNICOM department from both perspectives. The goal of this study was to identify vulnerabilities that are present at the department. The social engineering audit includes simulated phishing attacks and also attempts to gain unauthorised access to the premises of the USP TECHNICOM building. Web applications are audited using pen-etration testing tools such as OWASP Zed Attack Proxy, Nmap, and Burp Suite. Based on the audit results, recommendations for improving the overall security of the department were proposed.