OWASP – WSTG-ATHN-09 – Authentication Testing – Testing for Weak Password Change or Reset Functionalities
Summary The password change and reset function of an application is a self-service password change or reset mechanism for users....
- Home
- Frameworks and Standards
- OWASP WSTG
OWASP WSTG
OWASP – WSTG-CLNT-03 – Client Side Testing – Testing for HTML Injection
Summary HTML injection is a type of injection vulnerability that occurs when a user is able to control an input...OWASP – WSTG-CLNT-04 – Client Side Testing – Testing for Client Side URL Redirect
Summary This section describes how to check for client side URL redirection, also known as open redirection. It is...OWASP – WSTG-CLNT-05 – Client Side Testing – Testing for CSS Injection
Summary A CSS Injection vulnerability involves the ability to inject arbitrary CSS code in the context of a trusted...OWASP – WSTG-CLNT-06 – Client Side Testing – Testing for Client Side Resource Manipulation
Summary A client side resource manipulation vulnerability is an input validation flaw. It occurs when an application accepts user-controlled...OWASP – WSTG-CLNT-07 – Client Side Testing – Test Cross Origin Resource Sharing
Summary Cross origin resource sharing (CORS) is a mechanism that enables a web browser to perform cross-domain requests using the XMLHttpRequest...OWASP – WSTG-CLNT-08 – Client Side Testing – Testing for Cross Site Flashing
Summary ActionScript, based on ECMAScript, is the language used by Flash applications when dealing with interactive needs. There are three...OWASP – WSTG-CLNT-09 – Client Side Testing – Testing for Clickjacking
Summary Clickjacking, a subset of UI redressing, is a malicious technique whereby a web user is deceived into interacting (in...OWASP – WSTG-CLNT-10 – Client Side Testing – Testing WebSockets
Summary Traditionally, the HTTP protocol only allows one request/response per TCP connection. Asynchronous JavaScript and XML (AJAX) allows clients...OWASP – WSTG-CLNT-11 – Client Side Testing – Test Web Messaging
Summary Web Messaging (also known as Cross Document Messaging) allows applications running on different domains to communicate in a secure...