OWASP Testing Guide v3 Table of Contents

26th April 2008 This is the draft of table of content of the New Testing Guide. You can download the stable version here or read it on line here

The new OWASP testing Guide (OTG): 1) Authorization testing missing  (new category) 2) Information gathering is not a vulnerability  not in report  Passive mode 3) Business logic testing  not in report  Passive mode 4) Infrastructural test  (new cathegory) 5) Web Services section needs improvement 6) AJAX Testing section needs improvement 7) New category: Client side Testing Proposed new category for the OTG v3:

• Passive Mode
• Information Gathering
• Business logic testing
• Web Application Penetration Testing

Infrastructural testing Authentication Testing Authorization Testing Session Management Testing Data Validation Testing Denial of Service Testing Web Services Testing Client-Side Testing AJAX Testing Flash Testing