Web Application Assessment (Due 3 hrs)

OverviewGlobalComm has hired you as an offensive security consultant. You have beentasked with writing a penetrating test report against the web application ofGlobalComm - DVWA. The expectation is you use active information gatheringtechniques and methods to exploit web applications.Rules of engagement• The only computer that should targeted is Metasploitable• Students must of preformed the lab preparation assignment beforecontinuingTasks and expectations• Show proficiency Web application security• Write a response to the tasks and questions belowTechnical QuestionsFor this lab report screenshots of every command is not needed, please use yourjudgment when documenting this. Screenshots again should be used but limited. Ido not want 5 pages of screenshots; additionally use the cropping tool to tighten thescreenshots that are used.DesignWeb Application AssessmentThe CTO of GlobalComm has requested an in-depth assessment of the WebApplications running on the Linux virtual machine provided. A report should bewritten outlining the risk the current system has and recommendations on how toresolve them. DVWA should be the focus of the report but feel free to include anassessment of the other web applications running. Within the report you shouldexplain the following:• Information gathering• Vulnerability identification• Authentication weaknesses• Web Application Exploitationo 4 Exploits should be demonstrated! 1 SQL injection attack! 1 attack using SQL Map! 1 attack using demonstrating a web shell! 1 attack of choiceo 1 additional Exploit with DVWA in medium will award you 5 bonuspoints• Data exfiltration or disclosure possibilities should be outline and explain therisk in-depth.• Remediation steps and action items to resolve issues identified should beelaborated on.