Week 1 - Security Assessment of Web App

🔍 Tools Used

• OWASP ZAP
• Browser DevTools
• Manual Testing

🧪 Vulnerabilities Identified

• XSS on signup field
• SQL Injection on login
• Weak password hashing
• Missing HTTP security headers

🛠 Recommendations

• Sanitize all user input
• Use parameterized queries
• Hash passwords with bcrypt
• Add Helmet middleware

📎 Reports

• See /reports/Week1_Assessment_Report.pdf

webapp-security-assessment