Ctrlk

Home
CTF WRITE UP
Web Security

Web Security
Web Security Testing Guide (WSTG)
OWASP API Security Top 10 2019
- 01 - Object Level Authorization
02 - Broken User Authentication
03 - Excessive Data Exposure
04 - Lack of Resources & Rate Limiting
05 - Broken Function Level Authorization
06 - Mass Assignment
07 - Security Misconfiguration
08 - Injection
09 - Improper Assets Management
10 - Insufficient Logging & Monitoring
OWASP TOP 10 2021
04 - Insecure Design
05 - Security Misconfiguration
06 - Vulnerable and Outdated Components
07 - Identification and Authentication Failures
08 - Software and Data Integrity Failures
09 - Security Logging and Monitoring Failures
10 - Server-Side Request Forgery (SSRF)

Powered by GitBook

On this page

Web Security Testing Guide (WSTG)

WSTG - Information Gathering

01 - Conduct Search Engine Discovery Reconnaissance for Information Leakage 02 - Fingerprint Web Server 03 - Review Webserver Metafiles for Information Leakage

PreviousWeb Security Next01 - Conduct Search Engine Discovery Reconnaissance for Information Leakage