Web application attacks and vectors are progressing at a rapid pace. With the volume of people using the internet, businesses have to adapt and leverage complex web applications to provide services to customers or even employees. Having these on the internet obviously exposes them to risks. Most businesses take security seriously and, with the use of various software development life cycles, there are some really secure web applications out there.

Nevertheless, as security measures become stronger, so do the attacks. Over and above the attacks becoming more sophisticated, there is human error that comes into the equation. All it takes is a piece of poorly written code to exploit the web application.

In this section, we will consider a few of the common web application attacks that exist today.