Many understand how infrastructure is important to a solid and secure network, but they overlook that fact that infrastructure is important to web applications as well. A poorly designed infrastructure can also lead to security issues within the web application. For example, if you have a webserver and database server on the exact same network, then a compromised webserver would most likely lead to a compromised database server.

Just like infrastructure design, the actual design of the web application is key to a successful and secure web application. Therefore, as a penetration tester, you will want to make sure the web application is secure and doesn't have any design flaws that may lead to secure incidents.

Using the following tools, I will examine my web application for any infrastructure or design weaknesses.