A penetration test, is an authorized simulated attack on a computer system that looks for security weaknesses, potentially gaining access to the system's features and data. My tests are based on OWASP TOP 10 standards. Tools used: 1) Burpsuite Proffessional Complete attack overview: SQL injection (MSSQL, MySQL, MSAccess, Oracle, Firebird) LDAP Injection XXE (XML Eternal Entity) XSS(Cross Site Scripting - Stored(Persistant) - Reflected(Non-Peristant) CSRF (Cross site request forgery) Local File Inclusion Brute Force Unwanted redirections Information Disclosure