Website vulnerability scanning extension
Such vulnerability scanning continues even as attacks of this kind rise in complexity by targeting the whole website, a reason for secure web applications and thus more concern about it, as many software tools of these traditional tools based on the classic vulnerability scanner would be applied against websites but it is found the browser-based site vulnerability scanner was convenient. This paper attempts to investigate the functionality and effectiveness of website vulnerability scanning extensions such as Wappalyzer, No Script, Burp Suite, and Security Headers. The study analyses how these extensions enhance security testing by giving real-time information on vulnerabilities like XSS, SQL Injection, and insecure HTTP headers. The results are crucial to understanding the significance of incorporating these tools into the web development workflow, as well as their limitations. It concludes by recommending using vulnerability scanning extensions along with comprehensive security testing for a more robust web application security posture.
Authors
- Mukesh Patidar (ORCID: https://orcid.org/0000-0002-4401-8777)
- Dhruv Desai (ORCID: https://orcid.org/0000-0003-2985-6710)
- Gulab Singh Yadav (ORCID: https://orcid.org/0000-0002-9607-2492)
- Arun Chauhan (ORCID: https://orcid.org/0000-0002-0327-7254)
- S. H. Patel
- A. K. Dave
- Mihir Mahale
- Harsh Baria
Institutions
- Parul University (IN)
Publication Details
- Journal
- IET conference proceedings.
- Published
- 2025-06-27
- DOI
- https://doi.org/10.1049/icp.2025.1286
- Citations
- 6
- Primary Topic
- Web Application Security Vulnerabilities
- Type
- article
- Field-Weighted Citation Impact
- 19.48