About

The OWASP Web Security Testing Guide (WSTG) is a comprehensive guide to testing the security of web applications. It provides a framework of best practices used by penetration testers and security professionals worldwide, with 100+ individual test procedures covering information gathering, authentication, authorization, session management, input validation, cryptography, business logic, client-side, and API testing.

Preview

OWASP Web Security Testing Guide v4.2

The OWASP Web Security Testing Guide (WSTG) is a comprehensive guide to testing the security of web applications and web services. Created by the collaborative efforts of cybersecurity professionals and dedicated volunteers, the WSTG provides a framework of best practices used by penetration testers and organizations all over the world.

This book contains the complete WSTG, organized by testing category. Each individual test procedure is identified by its WSTG-XXXX-NN code for easy reference.

About This Edition

Version: 4.2 (latest from master branch)
License: Creative Commons Attribution-ShareAlike 4.0 International (CC BY-SA 4.0)
Source: https://github.com/OWASP/wstg
Website: https://owasp.org/www-project-web-security-testing-guide/

Testing Categories

Code	Category	Tests
INFO	Information Gathering	10
CONF	Configuration & Deployment Management	14
IDNT	Identity Management	5
ATHN	Authentication	11
ATHZ	Authorization	5 (+2 sub-tests)
SESS	Session Management	11
INPV	Input Validation	20 (+9 sub-tests)
ERRH	Error Handling	2
CRYP	Weak Cryptography	4
BUSL	Business Logic	11
CLNT	Client-side	15 (+1 sub-test)
APIT	API Testing	4

Add to library to read more

Table of Contents

Web Application Security Testing

Information Gathering

WSTG-INFO-09: Fingerprint Web Application

Configuration and Deployment Management Testing

WSTG-CONF-08: Test RIA Cross Domain Policy

Identity Management Testing

WSTG-IDNT-05: Testing for Weak or Unenforced Username Policy

Authentication Testing

WSTG-ATHN-01: Testing for Credentials Transported over an Encrypted Channel

Authorization Testing

Session Management Testing

Input Validation Testing

WSTG-INPV-03: Testing for HTTP Verb Tampering

WSTG-INPV-13: Testing for Buffer Overflow

Error Handling Testing

WSTG-ERRH-02: Testing for Stack Traces

Weak Cryptography Testing

Business Logic Testing

Client-side Testing

API Testing

Reporting

Appendix

OWASP Web Security Testing Guide v4.2

About

Preview

OWASP Web Security Testing Guide v4.2

About This Edition

Testing Categories

Table of Contents

OWASP Web Security Testing Guide v4.22 topics

Foreword4 topics

Frontispiece10 topics

Introduction72 topics

The Web Security Testing Framework21 topics

Penetration Testing Methodologies10 topics

Testing Introduction and Objectives8 topics

WSTG-INFO-01: Conduct Search Engine Discovery Reconnaissance for Information Leakage9 topics

WSTG-INFO-02: Fingerprint Web Server7 topics

WSTG-INFO-03: Review Webserver Metafiles for Information Leakage14 topics

WSTG-INFO-04: Attack Surface Identification17 topics

WSTG-INFO-05: Review Web Page Content for Information Leakage11 topics

WSTG-INFO-06: Identify Application Entry Points12 topics

WSTG-INFO-07: Map Execution Paths Through Application6 topics

WSTG-INFO-08: Fingerprint Web Application Framework21 topics

WSTG-INFO-10: Map Application Architecture20 topics

WSTG-CONF-01: Test Network Infrastructure Configuration6 topics

WSTG-CONF-02: Test Application Platform Configuration17 topics

WSTG-CONF-03: Test File Extensions Handling for Sensitive Information8 topics

WSTG-CONF-04: Review Old Backup and Unreferenced Files for Sensitive Information14 topics

WSTG-CONF-05: Enumerate Infrastructure and Application Admin Interfaces7 topics

WSTG-CONF-06: Test HTTP Methods15 topics

WSTG-CONF-07: Test HTTP Strict Transport Security4 topics

WSTG-CONF-09: Test File Permission6 topics

WSTG-CONF-10: Test for Subdomain Takeover12 topics

WSTG-CONF-11: Test Cloud Storage11 topics

WSTG-CONF-12: Testing for Content Security Policy7 topics

WSTG-CONF-13: Test Path Confusion8 topics

WSTG-CONF-14: Test Other HTTP Security Header Misconfigurations19 topics

WSTG-IDNT-01: Test Role Definitions8 topics

WSTG-IDNT-02: Test User Registration Process7 topics

WSTG-IDNT-03: Test Account Provisioning Process5 topics

WSTG-IDNT-04: Testing for Account Enumeration and Guessable User Account23 topics

WSTG-ATHN-02: Testing for Default Credentials8 topics

WSTG-ATHN-03: Testing for Weak Lock Out Mechanism8 topics

WSTG-ATHN-04: Testing for Bypassing Authentication Schema9 topics

WSTG-ATHN-05: Testing for Vulnerable Remember Password4 topics

WSTG-ATHN-06: Testing for Browser Cache Weaknesses11 topics

WSTG-ATHN-07: Testing for Weak Authentication Methods5 topics

WSTG-ATHN-08: Testing for Weak Security Question Answer9 topics

WSTG-ATHN-09: Testing for Weak Password Change or Reset Functionalities12 topics

WSTG-ATHN-10: Testing for Weaker Authentication in Alternative Channel10 topics

WSTG-ATHN-11: Testing Multi-Factor Authentication (MFA)19 topics

WSTG-ATHZ-01: Testing Directory Traversal File Include11 topics

WSTG-ATHZ-02: Testing for Bypassing Authorization Schema17 topics

WSTG-ATHZ-03: Testing for Privilege Escalation16 topics

WSTG-ATHZ-04: Testing for Insecure Direct Object References8 topics

WSTG-ATHZ-05: Testing for OAuth Weaknesses12 topics

WSTG-ATHZ-05.1: Testing for OAuth Authorization Server Weaknesses18 topics

WSTG-ATHZ-05.2: Testing for OAuth Client Weaknesses10 topics

WSTG-SESS-01: Testing for Session Management Schema13 topics

WSTG-SESS-02: Testing for Cookies Attributes21 topics

WSTG-SESS-03: Testing for Session Fixation7 topics

WSTG-SESS-04: Testing for Exposed Session Variables9 topics

WSTG-SESS-05: Testing for Cross Site Request Forgery6 topics

WSTG-SESS-06: Testing for Logout Functionality10 topics

WSTG-SESS-07: Testing Session Timeout7 topics

WSTG-SESS-08: Testing for Session Puzzling8 topics

WSTG-SESS-09: Testing for Session Hijacking4 topics

WSTG-SESS-10: Testing JSON Web Tokens22 topics

WSTG-SESS-11: Testing for Concurrent Sessions6 topics

WSTG-INPV-01: Testing for Reflected Cross Site Scripting21 topics

WSTG-INPV-02: Testing for Stored Cross Site Scripting16 topics

WSTG-INPV-04: Testing for HTTP Parameter Pollution11 topics

WSTG-INPV-05: Testing for SQL Injection35 topics

WSTG-INPV-05.1: Testing for Oracle21 topics

WSTG-INPV-05.2: Testing for MySQL20 topics

WSTG-INPV-05.3: Testing for SQL Server21 topics

WSTG-INPV-05.4: Testing PostgreSQL27 topics

WSTG-INPV-05.5: Testing for MS Access8 topics

WSTG-INPV-05.6: Testing for NoSQL Injection8 topics

WSTG-INPV-05.7: Testing for ORM Injection7 topics

WSTG-INPV-05.8: Testing for Client-side8 topics