Patent ID: 11921862

Abstract:
Systems and methods for rules-based automated penetration testing and regression to certify release candidates against known patterns that inject vulnerabilities are disclosed. In one embodiment, a method for rules-based automated penetration testing to certify release candidates may include: (1) receiving, at a penetration test computer program executed by a computer processor, a plurality of URLs for an application to be tested; (2) retrieving, by the penetration test computer program and from a rules pack in a database, an URL injectible and a URL parameter for the URL injectible; (3) generating, by a URL scanner and malformer computer program, a malformed URL, wherein the malformed URL may include one of the URLs injected with the URL injectible injected at the parameter in the URL; (4) firing, by the penetration test computer program, the malformed URL; (5) receiving, by the penetration test computer program, an output from the application; and (6) executing at least one validation algorithm on the output.