OWASP – WSTG-INFO-08 – Information Gathering – Fingerprint Web Application Framework
Summary There is nothing new under the sun, and nearly every web application that one may think of developing has...
- Home
- Frameworks and Standards
- OWASP WSTG
OWASP WSTG
OWASP – WSTG-INFO-09 – Information Gathering – Fingerprint Web Application
Summary There is nothing new under the sun, and nearly every web application that one may think of developing has...OWASP – WSTG-INFO-10 – Information Gathering – Map Application Architecture
Summary In order to effectively test an application, and to be able to provide meaningful recommendations on how to address...OWASP – WSTG-INPV-01 – Data Validation Testing – Testing for Reflected Cross Site Scripting
Summary Reflected Cross-site Scripting (XSS) occur when an attacker injects browser executable code within a single HTTP response. The injected attack is...OWASP – WSTG-INPV-02 – Data Validation Testing – Testing for Stored Cross Site Scripting
Summary Stored Cross-site Scripting (XSS) is the most dangerous type of Cross Site Scripting. Web applications that allow users to store data...OWASP – WSTG-INPV-03 – Data Validation Testing – Testing for HTTP Verb Tampering
Summary HTTP Verb Tampering tests the web application’s response to different HTTP methods accessing system objects. For every system...OWASP – WSTG-INPV-04 – Data Validation Testing – Testing for HTTP Parameter Pollution
Summary HTTP Parameter Pollution tests the applications response to receiving multiple HTTP parameters with the same name; for example, if...OWASP – WSTG-INPV-06 – Data Validation Testing – Testing for LDAP Injection
Summary The Lightweight Directory Access Protocol (LDAP) is used to store information about users, hosts, and many other objects. LDAP...