Application Security Assessment

Hackcraft team methodology and experience made them capable to test any application for vulnerabilities and best practices. Application may be a classic web or mobile application or a not so common desktop application that communicates with a server.

Web Application Security Assessment

Web application penetration testing is the practice of performing attacks on a Web Application (authenticated or not) in an attempt to compromise the system, gain access to sensitive data, misuse that applications functionalities and discover vulnerabilities and missing best practices.  It is an essential penetration test that will satisfy compliance requirements, identifies vulnerabilities and harden the environment.

Hackcraft's Web Application Security Assessment services, based on accepted and well defined methodologies and will perform at minimum:

  • Application mapping
  • Configuration and Deployment Management Testing
  • Identity Management Testing
  • Authentication Testing
  • Authorization Testing
  • Session Management Testing
  • Input Validation Testing
  • Testing for Error Handling
  • Business Logic Testing
  • Client-side Testing
  • API Testing
  • Missing Best Practices

Web API Security Assessment

Web API penetration testing is the practice of performing attacks on a Web API (authenticated or not) that is not supported by a front end, in an attempt to compromise the system, gain access to sensitive data, misuse that applications functionalities and discover vulnerabilities and missing best practices.  It is an essential penetration test that will satisfy compliance requirements, identifies vulnerabilities and harden the environment.

Hackcraft's Web API Security Assessment services, based on accepted and well defined methodologies, will perform at minimum:

  • Application mapping
  • Configuration and Deployment Management Testing
  • Identity Management Testing
  • Authentication Testing
  • Authorization Testing
  • Session Management Testing
  • Input Validation Testing
  • Testing for Error Handling
  • Business Logic Testing
  • Missing Best Practices

Mobile Application Security Assessment

The mobile application penetration test is a way to analyze the security of a mobile environment and gain insights into the source code's vulnerabilities, bottlenecks, and attack vectors before it happens. Penetration testing helps increase cyber security across mobile apps.

Hackcraft's Mobile Application Security Assessment services, based on accepted and well defined methodologies, will test at minimum:

  • Architecture, Design and Threat Modelling
  • Data Storage and Privacy
  • Cryptography
  • Authentication and Session Management
  • Network Communication
  • Environmental Interaction
  • Code Quality and Build Setting
  • Authentication and session implementation
  • Static analysis of the application binary
  • Jailbreak detection
  • Broken access control
  • SSL pinning countermeasure
  • Testing the APIs for injection
  • Resiliency Against Reverse Engineering

Desktop Application Security Assessment

The client application penetration test is a way to analyze the security of a client application and gain insights into the source code's vulnerabilities, and attack vectors that may introduce to the system .

Hackcraft's Desktop Application Security Assessment services, based on accepted and well defined methodologies, will test at minimum:

  • Analyze configuration files
  • Input Validation
  • Business Logic
  • Authentication and Session Management
  • Network Communication
  • Environmental Interaction
  • Authentication and session implementation
  • Static analysis of the application binary
  • Resiliency Against Reverse Engineering
  • DLL Hijacking