LJahn at 20:25, 17 December 2024

2024-12-17T20:25:43Z

← Older revision		Revision as of 20:25, 17 December 2024
Line 32:		Line 32:

	For information on and demonstration of possible SQL Injection attacks in Acunetix Acuart see [[SQL Injection Examples on Known Vulnerable Web Applications]].		For information on and demonstration of possible SQL Injection attacks in Acunetix Acuart see [[SQL Injection Examples on Known Vulnerable Web Applications]].

			[[Category:Documentation]]

LJahn: Created page with "The Acunetix Acuart website is part of a suite of intentionally insecure web applications provided by Acunetix, a company specializing in automated security testing tools. Other notable applications in this suite include Acuforumhttp://testasp.vulnweb.com, Acubloghttp://testaspnet.vulnweb.com, and SecurityTweets.http://testhtml5.vulnweb.com Acuart specifically simulates an e-commerce art gallery where users can browse categories, artists, and artworks,..."

2024-12-17T19:33:45Z

Created page with "The Acunetix Acuart website is part of a suite of intentionally insecure web applications provided by Acunetix, a company specializing in automated security testing tools. Other notable applications in this suite include Acuforumhttp://testasp.vulnweb.com, Acubloghttp://testaspnet.vulnweb.com, and SecurityTweets.http://testhtml5.vulnweb.com Acuart specifically simulates an e-commerce art gallery where users can browse categories, artists, and artworks,..."

New page

The Acunetix Acuart website is part of a suite of intentionally insecure web applications provided by Acunetix, a company specializing in automated security testing tools. Other notable applications in this suite include Acuforum[[http://testasp.vulnweb.com]], Acublog[[http://testaspnet.vulnweb.com]], and SecurityTweets.[[http://testhtml5.vulnweb.com]]

Acuart specifically simulates an e-commerce art gallery where users can browse categories, artists, and artworks, as well as post comments.

The Acuart website is only accessible online through the official website provided by Acunetix. It does not offer downloadable application code for local execution, limiting the environment to its hosted version. [[http://testphp.vulnweb.com]]

The platform serves as a testing and demonstration tool for the Acunetix Vulnerability Scanner [[https://www.acunetix.com/plp/acunetix-scanner]], an automated solution for identifying security flaws in web applications.

Unlike websites like [[OWASP Juice Shop]], Acuart is not primarily intended as a learning environment for hacking techniques and lacks comprehensive documentation of its architecture and vulnerabilities. There is only a general note on the Acuart website that refers to possible security vulnerabilities such as SQL injections, cross-site scripting (XSS) and cross-site request forgery (CSRF). [[http://testphp.vulnweb.com]]
There are also no real-time notifications that provide feedback on successfully executed attacks.

== Architecture ==

'''Frontend'''

The user interface of Acuart is built using HTML, CSS, and JavaScript.

The frontend provides a very simple, straightforward experience for browsing art categories, viewing artists, and interacting with artworks.

'''Backend'''

The backend of the application is implemented in PHP and is responsible for handling user inputs, interactions, and communication with the database.

'''Database'''

Acuart relies on a MySQL database to store its data, including user-generated content such as comments, categories, and artwork details.

== Possible Executable Attacks ==

Like mentioned before, there is only a general note on the Acuart website that refers to possible security vulnerabilities such as SQL Injection (SQLi), Cross-site Scripting (XSS), and Cross-site Request Forgery (CSRF) [[http://testphp.vulnweb.com]].

For information on and demonstration of possible SQL Injection attacks in Acunetix Acuart see [[SQL Injection Examples on Known Vulnerable Web Applications]].

Acuart - Revision history

LJahn at 20:25, 17 December 2024