Sk Akbar , Devarapalli Bhasakra Venkat Sai , Md Bushra 3 3 (July - September) Web applications are ubiquitous and serve various business and technical functions As the number of web applications continues to increase they are also becoming one of the most common targets for cyberattacks This paper proposes a web application penetration testing framework that helps identify classify and mitigate security vulnerabilities in web applications The proposed framework is based on the OWASP Top 10 and leverages several security tools to detect vulnerabilities with higher accuracy and a minimized number of falsepositive outcomes The proposed framework classifies detected vulnerabilities based on their categories and assigns a priority level to the detected vulnerabilities based on their risk assessment Mitigation recommendations are also provided along with a complete security report that helps developers in strengthening the application security The effectiveness of the proposed framework is evaluated using a number of web applications including DVWA and OWASP Juice Shop Copyright (c) World Journal of Pharmaceutical Seiences. All rights reserved 2026