OWASP – WSTG-IDNT-04 – Identity Management Testing – Testing for Account Enumeration and Guessable User Account
Summary The scope of this test is to verify if it is possible to collect a set of valid...
- Home
- Frameworks and Standards
- OWASP WSTG
OWASP WSTG
OWASP – WSTG-INPV-07 – Data Validation Testing – Testing for XML Injection
Summary XML Injection testing is when a tester tries to inject an XML doc to the application. If the XML...OWASP – WSTG-INPV-11 – Data Validation Testing – Testing for Code Injection
Summary This section describes how a tester can check if it is possible to enter code as input on a...OWASP – WSTG-INFO-02 – Information Gathering – Fingerprint Web Server
Summary Web server fingerprinting is the task of identifying the type and version of web server that a target...OWASP – WSTG-SESS-05 – Session Management Testing – Testing for Cross Site Request Forgery
Summary Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unintended actions on a web...OWASP – WSTG-INFO-03 – Information Gathering – Review Webserver Metafiles for Information Leakage
Summary This section describes how to test various metadata files for information leakage of the web application’s path(s), or functionality....OWASP – WSTG-INFO-04 – Information Gathering – Enumerate Applications on Webserver
Summary A paramount step in testing for web application vulnerabilities is to find out which particular applications are hosted on...OWASP – WSTG-INFO-05 – Information Gathering – Review Webpage Content for Information Leakage
Summary It is very common, and even recommended, for programmers to include detailed comments and metadata on their source code....OWASP – WSTG-INFO-06 – Information Gathering – Identify application entry points
Summary Enumerating the application and its attack surface is a key precursor before any thorough testing can be undertaken, as...OWASP – WSTG-INFO-07 – Information Gathering – Map execution paths through application
Summary Before commencing security testing, understanding the structure of the application is paramount. Without a thorough understanding of the...