Penetration test, which is also known as pentest, is an authorized simulated cyberattack on a computer system, which is aimed at evaluating the security of the system. The test is performed to identify both weaknesses (also referred to as vulnerabilities), including the potential for unauthorized parties to gain access to the system's features and data, as well as strengths,enabling a full risk assessment to be completed. Types of Web Penetration Testing Web applications can be penetration tested in 2 ways. Tests can be designed to simulate an inside or an outside attack. 1) Internal Penetration Testing – As the name suggests, the internal pen testing is done within the organization over the LAN, hence it includes testing web applications hosted on the intranet. This helps in finding out if there could be vulnerabilities which exist within the corporate firewall. We always believe attacks can happen only externally and many a time’s internal Pentest is overloo...