OWASP – WSTG-CLNT-12 – Client Side Testing – Testing Browser Storage
Summary Browsers provide the following client-side storage mechanisms for developers to store and retrieve data: Local Storage Session Storage IndexedDB...
- Home
- Frameworks and Standards
- OWASP WSTG
OWASP WSTG
OWASP – WSTG-BUSL-06 – Business logic Testing – Testing for the Circumvention of Work Flows
Summary Workflow vulnerabilities involve any type of vulnerability that allows the attacker to misuse an application/system in a way that...OWASP – WSTG-CLNT-13 – Client Side Testing – Testing for Cross Site Script Inclusion
Summary Cross Site Script Inclusion (XSSI) vulnerability allows sensitive data leakage across-origin or cross-domain boundaries. Sensitive data could include authentication-related...OWASP – WSTG-BUSL-07 – Business logic Testing – Test Defenses Against Application Mis-use
Summary The misuse and invalid use of of valid functionality can identify attacks attempting to enumerate the web application, identify...OWASP – WSTG-CONF-01 – Configuration and Deploy Management Testing – Test Network Infrastructure Configuration
Summary The intrinsic complexity of interconnected and heterogeneous web server infrastructure, which can include hundreds of web applications, makes...OWASP – WSTG-BUSL-08 – Business logic Testing – Test Upload of Unexpected File Types
Summary Many applications’ business processes allow for the upload and manipulation of data that is submitted via files. But the...OWASP – WSTG-CONF-02 – Configuration and Deploy Management Testing – Test Application Platform Configuration
Summary Proper configuration of the single elements that make up an application architecture is important in order to prevent...OWASP – WSTG-BUSL-09 – Business logic Testing – Test Upload of Malicious Files
Summary Many application’s business processes allow users to upload data to them. Although input validation is widely understood for text-based...OWASP – WSTG-CONF-03 – Configuration and Deploy Management Testing – Test File Extensions Handling for Sensitive Information
Summary File extensions are commonly used in web servers to easily determine which technologies, languages and plugins must be...OWASP – WSTG-CLNT-01 – Client Side Testing – Testing for DOM-Based Cross Site Scripting
Summary DOM-based cross-site scripting is the de-facto name for XSS bugs that are the result of active browser-side content on a page, typically...