Vulnerability Assessment Report – Altoro Mutual Web Application

📌 Overview

This repository contains the deliverables for Cyber Security Task 1 (2026) by Future Interns.
The objective of this task was to perform a read-only vulnerability assessment of a public-facing web application and present the findings in a professional security report.

The assessment was conducted in an ethical and non-intrusive manner, focusing on identifying common security misconfigurations and weaknesses without exploiting or harming the target system.

---

🌐 Target Information

• Website Tested: Altoro Mutual (demo web application)
• Application Type: Public-facing web application
• Assessment Type: Vulnerability Assessment (Read-Only Scope)

---

🎯 Assessment Scope

✔ In-Scope

• Publicly accessible web pages
• Passive vulnerability scanning
• HTTP header and cookie analysis
• Network exposure analysis (port scanning)
• Configuration and information disclosure checks

❌ Out-of-Scope

• Authentication bypass
• Exploitation of vulnerabilities
• Brute-force attacks
• Denial-of-Service (DoS)
• Any action that could disrupt service availability or data integrity

---

🛠️ Tools Used

The following tools were used during the assessment:

• Nmap / Zenmap – Network and port exposure analysis
• OWASP ZAP (Passive Scan) – Identification of security misconfigurations and vulnerabilities without active exploitation
• Browser Developer Tools – HTTP headers, cookies, and client-side inspection
• Canva – For pdf preparation

---