OWASP – WSTG-CRYP-02 – Cryptography – Testing for Padding Oracle
Summary A padding oracle is a function of an application which decrypts encrypted data provided by the client, e.g. internal...
- Home
- Frameworks and Standards
- OWASP WSTG
OWASP WSTG
OWASP – WSTG-CRYP-03 – Cryptography – Testing for Sensitive Information Sent via Unencrypted Channels
Summary Sensitive data must be protected when it is transmitted through the network. If data is transmitted over HTTPS or...OWASP – WSTG-CRYP-04 – Cryptography – Testing for Weak Encryption
Summary Incorrect uses of encryption algorithms may result in sensitive data exposure, key leakage, broken authentication, insecure session, and...OWASP – WSTG-ERRH-01 – Error Handling – Testing for Improper Error Handling
Summary All types of applications (web apps, web servers, databases, etc.) will generate errors for various reasons. Developers often ignore...OWASP – WSTG-ERRH-02 – Error Handling – Testing for Stack Traces
Summary All types of applications (web apps, web servers, databases, etc.) will generate errors for various reasons. Developers often ignore...OWASP – WSTG-IDNT-01 – Identity Management Testing – Test Role Definitions
Summary It is common in modern enterprises to define system roles to manage users and authorization to system resources. In...OWASP – WSTG-IDNT-02 – Identity Management Testing – Test User Registration Process
Summary Some websites offer a user registration process that automates (or semi-automates) the provisioning of system access to users. The...OWASP – WSTG-CONF-04 – Configuration and Deploy Management Testing – Review Old Backup and Unreferenced Files for Sensitive Information
Summary While most of the files within a web server are directly handled by the server itself, it isn’t...OWASP – WSTG-IDNT-03 – Identity Management Testing – Test Account Provisioning Process
Summary The provisioning of accounts presents an opportunity for an attacker to create a valid account without application of the...OWASP – WSTG-CONF-05 – Configuration and Deploy Management Testing – Enumerate Infrastructure and Application Admin Interfaces
Summary Administrator interfaces may be present in the application or on the application server to allow certain users to...