Security Testing Cheat Sheet - Revision history

Dominique RIGHETTO: Migration to GitHub of the project

2019-02-16T10:21:50Z

Migration to GitHub of the project

Dominique RIGHETTO: Add the DELETE marker. Refer to CS cleanup phase

2018-08-25T09:23:42Z

Add the DELETE marker. Refer to CS cleanup phase

Bill Sempf: Set up headers.

2013-03-23T03:27:57Z

Set up headers.

Bill Sempf: Created page with "== DRAFT CHEAT SHEET - WORK IN PROGRESS == == Introduction == This page intends to provide quick basic security tips for quality assurance specialists. The goal of the cheat..."

2013-03-19T03:06:28Z

Created page with "== DRAFT CHEAT SHEET - WORK IN PROGRESS == == Introduction == This page intends to provide quick basic security tips for quality assurance specialists. The goal of the cheat..."

New page

== DRAFT CHEAT SHEET - WORK IN PROGRESS ==
== Introduction ==
This page intends to provide quick basic security tips for quality assurance specialists. The goal of the cheat sheet is to act as a starting point for a comprehensive QA Test Plan for security of web applications.

==Testing Tools==

Testing web applications is difficult without tools. The following tools are the common set for QA professionals to accomplish all of the test cases in the security test plan.

* Zed Attack Proxy
* WebScarab

==Security Test Plan==

Each major security surface in a web application has a known set of vulnerabilities that can be tested for using a set of test cases.

== Authors and Primary Editors ==

Bill Sempf - bill.sempf [at] owasp.org [[User:Bill Sempf]]<br/>

== Other Cheatsheets ==
{{Cheatsheet_Navigation}}

[[Category:Cheatsheets]]

@@ Line 1: / Line 1: @@
-== DRAFT CHEAT SHEET - WORK IN PROGRESS ==
+ __NOTOC__
-== Introduction  ==
+<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:Cheatsheets-header.jpg|link=]]</div>
-==Testing Tools==
+The Cheat Sheet Series project has been moved to [https://github.com/OWASP/CheatSheetSeries GitHub]!
-Testing web applications is difficult without tools. The following tools are the common set for QA professionals to accomplish all of the test cases in the security test plan.
+An [https://github.com/OWASP/CheatSheetSeries/issues/13 open discussion] is pending about to exclude or not this cheat sheet of the V2 of the project.

← Older revision		Revision as of 09:23, 25 August 2018
Line 57:		Line 57:

	[[Category:Cheatsheets]]		[[Category:Cheatsheets]]
		+
		+	{{taggedDocument\| type=delete\| comment=Tagged via fixme/delete.}}

← Older revision		Revision as of 03:27, 23 March 2013
Line 13:		Line 13:

	Each major security surface in a web application has a known set of vulnerabilities that can be tested for using a set of test cases.		Each major security surface in a web application has a known set of vulnerabilities that can be tested for using a set of test cases.
		+
		+	=== Injection ===
		+
		+	=== Authentication and Authorization ===
		+
		+	=== Session management ===
		+
		+	=== Configuration ===
		+
		+	=== Compliance ===
		+
		+	==== PCI ====
		+
		+	==== HIPPA ====
		+
		+	=== Handling data ===
		+
		+	=== Technology Specific Tests ===
		+
		+	==== PHP ====
		+
		+	==== Microsoft ====
		+
		+	==== Ruby on Rails ====
		+
		+	==== Adobe ====
		+
		+	==== Java ====
		+
		+	==== JavaScript Frameworks ====
		+
		+	=== Configuration ===
		+
		+	=== Cross Site Request Forgery ===
		+

	== Authors and Primary Editors ==		== Authors and Primary Editors ==