OWASP – WSTG-CLNT-02 – Client Side Testing – Testing for JavaScript Execution
Summary A JavaScript injection vulnerability is a subtype of cross site scripting (XSS) that involves the ability to inject arbitrary...
- Home
- Frameworks and Standards
- OWASP WSTG
OWASP WSTG
OWASP – WSTG-CONF-06 – Configuration and Deploy Management Testing – Test HTTP Methods
Summary HTTP offers a number of methods that can be used to perform actions on the web server (the HTTP...OWASP – WSTG-IDNT-05 – Identity Management Testing – Testing for Weak or unenforced username policy
Summary User account names are often highly structured (e.g. Joe Bloggs account name is jbloggs and Fred Nurks account name...OWASP – WSTG-CONF-07 – Configuration and Deploy Management Testing – Test HTTP Strict Transport Security
Summary The HTTP Strict Transport Security (HSTS) feature lets a web application inform the browser through the use of...OWASP – WSTG-INFO-01 – Information Gathering – Conduct Search Engine Discovery Reconnaissance for Information Leakage
Summary In order for search engines to work, computer programs (or robots) regularly fetch data (referred to as crawling) from billions of...OWASP – WSTG-CONF-08 – Configuration and Deploy Management Testing – Test RIA cross domain policy
Summary Rich Internet Applications (RIA) have adopted Adobe’s crossdomain.xml policy files to allow for controlled cross domain access to...OWASP – WSTG-CONF-09 – Configuration and Deploy Management Testing – Test File Permission
Summary When a resource is given a permissions setting that provides access to a wider range of actors than required,...OWASP – WSTG-CONF-10 – Configuration and Deploy Management Testing – Test for Subdomain Takeover
Summary A successful exploitation of this kind of vulnerability allows an adversary to claim and take control of the victim’s...OWASP – WSTG-CONF-11 – Configuration and Deploy Management Testing – Test Cloud Storage
Summary Cloud storage services facilitate web application and services to store and access objects in the storage service. Improper access...OWASP – WSTG-CRYP-01 – Cryptography – Testing for Weak Transport Layer Security
Summary When information is sent between the client and the server, it must be encrypted and protected in order to...