Index
OWASP Web Security Testing Guide
Cheatsheets
- Application Programming Interface (API)
- Authentication
- Broken Access Control
- Client-Side Path Traversal (CSPT)
- Command Injection
- Cross-Origin Resource Sharing (CORS)
- Cross-Site Request Forgery (CSRF)
- File Uploads
- JSON Web Tokens (JWT)
- Local File Read
- OAuth
- Open Redirects
- JS Prototype Pollution
- Recon
- SQL Injection (SQLi)
- Server-Side Request Forgery (SSRF)
- Sever-Side Template Injection (SSTI)
- TLS Handshake
- XPath Injection
- Cross-Site Scripting (XSS)
- XML External Entity (XXE)