WebScan: A Comprehensive Static and Dynamic Analysis Approach for Web Application Security

The rapid growth of web applications has made it more challenging to prevent cyber threats. Early detection of security vulnerabilities is critical for ensuring the security of these applications. In this study, we introduce WebScan, a Python-based tool that performs static and dynamic analysis on web pages using open-source tools. We selected 100 popular websites to collect and analyze frontend files and shared the cybersecurity analysis results. Our findings identified common vulnerabilities such as SQL injection, cross-site scripting (XSS), and cryptographic issues. To maximize security analysis and uncover both frontend code and runtime-specific vulnerabilities, we recommend using static and dynamic analysis techniques together. This comprehensive approach provides developers with applicable solutions to enhance security practices and protect web applications from evolving.