Vulnerability Detection Behind Web Applications

This paper proposes techniques to detect the vulnerabilities by performing scanning process for all website and web applications. The revealing process for vulnerabilities in ASP.NET websites/ applications is a complex process, where most of the code is anonymous and there are no citations to determine the purpose of the code. Due to the fact that ASP.NET which is part of .NET framework that separate the HTML code from the programming code in two files, one for (aspx) file and another for the programming code depending on the compiled language Visual Basic , C#, Java Script. Since the VB and C# are the most common languages in use around the world with ASP.NET files, we have adopted these two compiled languages in the construction of our proposed algorithm in addition to aspx files. Therefore, the scanning process inspects at least those three types of files aspx, VB and C#.