The Business of Hacking: Creating, Developing, and Maintaining an Effective Penetration Testing Team

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2024

M. Butler, J. G. OakleyThe Business of Hackinghttps://doi.org/10.1007/979-8-8688-0174-7_9

9. Effective Web and Mobile Application Testing

Michael Butler¹   and Jacob G. Oakley²

(1)

Falls Church, VA, USA

(2)

Owens Cross Roads, AL, USA

 

Web and mobile application assessments are by far the most common type of engagement in our industry. They are the bread and butter of offensive cybersecurity. Even when the client requests an internal or external network assessment, there’s a good chance you’ll spend time testing applications hosted in those networks. For most teams, application testing is going to be the most important assessment domain.

The good news is that a ...