DEVELOPMENT OF A PLUGIN TO ASSESSING THE VULNERABILITY OF A WEB RESOURCE

The expanding digital landscape has brought unprecedented opportunities but also increased exposure to cybersecurity threats. This study developed a user-friendly Google Chrome plugin to assess web vulnerabilities, focusing on SQL injection and Cross-Site Scripting (XSS) attacks, with an emphasis on empowering students and novice developers. The plugin provides real-time vulnerability detection and actionable recommendations, enhancing web security education and practice. Developed using JavaScript, HTML5, and CSS3, the plugin integrates seamlessly with the Chrome browser. A subsequence matching algorithm scans web pages for known vulnerability patterns, supported by an updated database. The user interface, designed for simplicity, allows users to initiate scans with a single click. Testing was conducted on a purposely vulnerable website and real-world external sites to validate effectiveness. The plugin successfully identified SQL injection and XSS vulnerabilities, categorizing them into Easy, Medium, and Complex levels. Detailed reports highlighted vulnerability locations and provided mitigation recommendations, while real-time alerts ensured prompt attention to threats. User feedback from 56 students indicated high satisfaction, with 80% finding the plugin interesting and 73% considering it very useful. The plugin bridges the gap between complex cybersecurity tools and novice users, offering a practical solution for web vulnerability assessment. The study demonstrates the plugin’s effectiveness in real-world scenarios, contributing to a safer digital ecosystem. Future work will expand detectable vulnerabilities and improve compatibility with other browsers. This research underscores the importance of proactive vulnerability assessment in web security, providing a tool that identifies vulnerabilities and educates users on preventive measures.