OWASP – WSTG-INPV-05 – Data Validation Testing – Testing for SQL Injection
Summary SQL injection testing checks if it is possible to inject data into the application so that it executes a...
- Home
- Frameworks and Standards
- OWASP WSTG
OWASP WSTG
OWASP – WSTG-INPV-08 – Data Validation Testing – Testing for SSI Injection
Summary Web servers usually give developers the ability to add small pieces of dynamic code inside static HTML pages,...OWASP – WSTG-INPV-09 – Data Validation Testing – Testing for XPath Injection
Summary XPath is a language that has been designed and developed primarily to address parts of an XML document....OWASP – WSTG-INPV-10 – Data Validation Testing – Testing for IMAP SMTP Injection
Summary This threat affects all applications that communicate with mail servers (IMAP/SMTP), generally webmail applications. The aim of this test...OWASP – WSTG-SESS-04 – Session Management Testing – Testing for Exposed Session Variables
Summary The Session Tokens (Cookie, SessionID, Hidden Field), if exposed, will usually enable an attacker to impersonate a victim...OWASP – WSTG-SESS-05 – Session Management Testing – Testing for Cross Site Request Forgery
Summary Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unintended actions on a web...OWASP – WSTG-SESS-06 – Session Management Testing – Testing for Logout Functionality
Summary Session termination is an important part of the session lifecycle. Reducing to a minimum the lifetime of the session...OWASP – WSTG-SESS-07 – Session Management Testing – Testing Session Timeout
Summary In this phase testers check that the application automatically logs out a user when that user has been...OWASP – WSTG-SESS-08 – Session Management Testing – Testing for Session Puzzling
Summary Session Variable Overloading (also known as Session Puzzling) is an application level vulnerability which can enable an attacker to...OWASP – WSTG-INPV-12 – Data Validation Testing – Testing for Command Injection
Summary This article describes how to test an application for OS command injection. The tester will try to inject an...