OWASP – WSTG-SESS-09 – Session Management Testing – Testing for Session Hijacking
Summary An attacker who gets access to user session cookies can impersonate them by presenting such cookies. This attack...
- Home
- Frameworks and Standards
- OWASP WSTG
OWASP WSTG
OWASP – WSTG-INPV-13 – Data Validation Testing – Testing for Format String Injection
Summary A format string is a null-terminated character sequence that also contains conversion specifiers interpreted or converted at runtime....OWASP – WSTG-INPV-14 – Data Validation Testing – Testing for Incubated Vulnerability
Summary Also often referred to as persistent attacks, incubated testing is a complex testing method that needs more than one...OWASP – WSTG-INPV-15 – Data Validation Testing – Testing for HTTP Splitting Smuggling
Summary This section illustrates examples of attacks that leverage specific features of the HTTP protocol, either by exploiting weaknesses...OWASP – WSTG-INPV-16 – Data Validation Testing – Testing for HTTP Incoming Requests
Summary This section describes how to monitor all incoming/outgoing HTTP requests on both client-side or server-side. The purpose of this...OWASP – WSTG-INPV-17 – Data Validation Testing – Testing for Host Header Injection
Summary A web server commonly hosts several web applications on the same IP address, referring to each application via the...OWASP – WSTG-INPV-18 – Data Validation Testing – Testing for Server-side Template Injection
Summary Web applications commonly use server side templating technologies (Jinja2, Twig, FreeMaker, etc.) to generate dynamic HTML responses. Server...OWASP – WSTG-INPV-19 – Data Validation Testing – Testing for Server-Side Request Forgery
Summary Web applications often interact with internal or external resources. While you may expect that only the intended resource will...OWASP – WSTG-SESS-01 – Session Management Testing – Testing for Session Management Schema
Summary One of the core components of any web-based application is the mechanism by which it controls and maintains...OWASP – WSTG-SESS-02 – Session Management Testing – Testing for Cookies Attributes
Summary Web Cookies (herein referred to as cookies) are often a key attack vector for malicious users (typically targeting other...