This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
User contributions
- 00:55, 20 April 2015 (diff | hist) . . (-1) . . SAMM - Security Requirements - 1 (current)
- 00:52, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Operational Enablement - 3 (current)
- 00:52, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Operational Enablement - 2 (current)
- 00:52, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Operational Enablement - 1 (current)
- 00:51, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Environment Hardening - 3 (current)
- 00:51, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Environment Hardening - 2 (current)
- 00:51, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Environment Hardening - 1 (current)
- 00:50, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Vulnerability Management - 3 (current)
- 00:50, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Vulnerability Management - 2 (current)
- 00:49, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Vulnerability Management - 1 (current)
- 00:49, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Security Testing - 3 (current)
- 00:48, 20 April 2015 (diff | hist) . . (-1) . . SAMM - Security Testing - 2 (current)
- 00:48, 20 April 2015 (diff | hist) . . (+47) . . SAMM - Security Testing - 2
- 00:48, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Security Testing - 1 (current)
- 00:47, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Design Review - 3 (current)
- 00:46, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Design Review - 2 (current)
- 00:46, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Design Review - 1 (current)
- 00:45, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Secure Architecture - 3 (current)
- 00:45, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Secure Architecture - 2 (current)
- 00:45, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Secure Architecture - 1 (current)
- 00:44, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Security Requirements - 3 (current)
- 00:43, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Security Requirements - 2 (current)
- 00:43, 20 April 2015 (diff | hist) . . (+47) . . SAMM - Security Requirements - 1
- 00:42, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Threat Assessment - 3 (current)
- 00:42, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Threat Assessment - 2 (current)
- 00:41, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Education & Guidance - 3 (current)
- 00:41, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Education & Guidance - 2 (current)
- 00:40, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Policy & Compliance - 3 (current)
- 00:39, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Policy & Compliance - 2 (current)
- 00:39, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Policy & Compliance - 1 (current)
- 00:36, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Code Review - 3 (current)
- 00:34, 20 April 2015 (diff | hist) . . (+46) . . SAMM - Strategy & Metrics - 3 (current)
- 00:33, 20 April 2015 (diff | hist) . . (0) . . SAMM - Strategy & Metrics - 2 (current)
- 00:32, 20 April 2015 (diff | hist) . . (-1) . . SAMM - Strategy & Metrics - 2
- 00:32, 20 April 2015 (diff | hist) . . (+47) . . SAMM - Strategy & Metrics - 2
- 17:10, 5 April 2015 (diff | hist) . . (+29) . . Projects/OWASP Mobile Security Project -2015 Scratchpad (→Prominent Characteristics)
- 17:09, 5 April 2015 (diff | hist) . . (0) . . N File:Data Transport.jpg (current)
- 17:00, 5 April 2015 (diff | hist) . . (+1) . . Projects/OWASP Mobile Security Project -2015 Scratchpad (→Prominent Characteristics)
- 16:59, 5 April 2015 (diff | hist) . . (+859) . . Projects/OWASP Mobile Security Project -2015 Scratchpad (→Prominent Characteristics)
- 10:09, 2 April 2015 (diff | hist) . . (+11) . . Projects/OWASP Mobile Security Project -2015 Scratchpad (→Prominent Characteristics)
- 22:14, 3 January 2014 (diff | hist) . . (+78) . . OWASP Testing Guide v4 Table of Contents
- 22:13, 3 January 2014 (diff | hist) . . (-25) . . OWASP Testing Guide v4 Table of Contents
- 23:13, 22 December 2013 (diff | hist) . . (-28) . . OWASP Testing Guide v4 Table of Contents
- 16:05, 22 December 2013 (diff | hist) . . (+1) . . Test business logic data validation (OTG-BUSLOGIC-001)
- 16:05, 22 December 2013 (diff | hist) . . (0) . . Test business logic data validation (OTG-BUSLOGIC-001)
- 16:03, 22 December 2013 (diff | hist) . . (+144) . . Test integrity checks (OTG-BUSLOGIC-003)
- 15:53, 22 December 2013 (diff | hist) . . (+958) . . Test for Process Timing (OTG-BUSLOGIC-004)
- 15:41, 22 December 2013 (diff | hist) . . (+202) . . Test number of times a function can be used limits (OTG-BUSLOGIC-005)
- 15:24, 22 December 2013 (diff | hist) . . (+129) . . Testing for the Circumvention of Work Flows (OTG-BUSLOGIC-006)
- 15:14, 22 December 2013 (diff | hist) . . (+145) . . Test Upload of Unexpected File Types (OTG-BUSLOGIC-008)
- 15:05, 22 December 2013 (diff | hist) . . (+153) . . Test Upload of Malicious Files (OTG-BUSLOGIC-009)
- 15:04, 22 December 2013 (diff | hist) . . (+208) . . Test Upload of Unexpected File Types (OTG-BUSLOGIC-008)
- 14:59, 22 December 2013 (diff | hist) . . (+26) . . Test Upload of Malicious Files (OTG-BUSLOGIC-009)
- 14:58, 22 December 2013 (diff | hist) . . (-113) . . Test Upload of Malicious Files (OTG-BUSLOGIC-009)
- 14:53, 22 December 2013 (diff | hist) . . (+733) . . Test Upload of Malicious Files (OTG-BUSLOGIC-009)
- 14:39, 22 December 2013 (diff | hist) . . (+19) . . Test Upload of Malicious Files (OTG-BUSLOGIC-009)
- 22:52, 20 December 2013 (diff | hist) . . (+32) . . User:David Fern (current)
- 22:50, 20 December 2013 (diff | hist) . . (0) . . Test number of times a function can be used limits (OTG-BUSLOGIC-005)
- 22:48, 20 December 2013 (diff | hist) . . (+55) . . Testing for the Circumvention of Work Flows (OTG-BUSLOGIC-006)
- 22:46, 20 December 2013 (diff | hist) . . (+117) . . Testing for the Circumvention of Work Flows (OTG-BUSLOGIC-006)
- 22:44, 20 December 2013 (diff | hist) . . (-11) . . Testing for the Circumvention of Work Flows (OTG-BUSLOGIC-006)
- 03:47, 17 December 2013 (diff | hist) . . (+17) . . Test Upload of Malicious Files (OTG-BUSLOGIC-009)
- 03:46, 17 December 2013 (diff | hist) . . (+3) . . Test Upload of Malicious Files (OTG-BUSLOGIC-009)
- 03:45, 17 December 2013 (diff | hist) . . (+8) . . Test Upload of Malicious Files (OTG-BUSLOGIC-009)
- 03:44, 17 December 2013 (diff | hist) . . (-1) . . Test Upload of Malicious Files (OTG-BUSLOGIC-009)
- 03:44, 17 December 2013 (diff | hist) . . (+29) . . Test Upload of Malicious Files (OTG-BUSLOGIC-009)
- 03:43, 17 December 2013 (diff | hist) . . (+651) . . Test Upload of Malicious Files (OTG-BUSLOGIC-009)
- 03:40, 17 December 2013 (diff | hist) . . (+749) . . Test Upload of Unexpected File Types (OTG-BUSLOGIC-008)
- 03:37, 17 December 2013 (diff | hist) . . (-3) . . Testing for the Circumvention of Work Flows (OTG-BUSLOGIC-006)
- 03:37, 17 December 2013 (diff | hist) . . (+639) . . Testing for the Circumvention of Work Flows (OTG-BUSLOGIC-006)
- 03:34, 17 December 2013 (diff | hist) . . (+552) . . Test number of times a function can be used limits (OTG-BUSLOGIC-005)
- 03:32, 17 December 2013 (diff | hist) . . (+995) . . Test for Process Timing (OTG-BUSLOGIC-004)
- 03:28, 17 December 2013 (diff | hist) . . (+4) . . Test business logic data validation (OTG-BUSLOGIC-001)
- 03:27, 17 December 2013 (diff | hist) . . (+3) . . Test Ability to forge requests (OTG-BUSLOGIC-002)
- 03:27, 17 December 2013 (diff | hist) . . (+6) . . Test integrity checks (OTG-BUSLOGIC-003)
- 03:26, 17 December 2013 (diff | hist) . . (+863) . . Test integrity checks (OTG-BUSLOGIC-003)
- 03:21, 17 December 2013 (diff | hist) . . (+1) . . Test Ability to forge requests (OTG-BUSLOGIC-002)
- 03:21, 17 December 2013 (diff | hist) . . (+331) . . Test Ability to forge requests (OTG-BUSLOGIC-002)
- 03:16, 17 December 2013 (diff | hist) . . (-1) . . Test business logic data validation (OTG-BUSLOGIC-001)
- 03:16, 17 December 2013 (diff | hist) . . (+10) . . Test business logic data validation (OTG-BUSLOGIC-001)
- 03:14, 17 December 2013 (diff | hist) . . (+1,024) . . Test business logic data validation (OTG-BUSLOGIC-001)
- 23:25, 16 December 2013 (diff | hist) . . (+122) . . OWASP Testing Guide v4 Table of Contents
- 14:12, 16 December 2013 (diff | hist) . . (+26) . . Test Ability to forge requests (OTG-BUSLOGIC-002)
- 14:12, 16 December 2013 (diff | hist) . . (+4) . . Test Ability to forge requests (OTG-BUSLOGIC-002)
- 13:40, 16 December 2013 (diff | hist) . . (+83) . . Test Upload of Malicious Files (OTG-BUSLOGIC-009)
- 13:39, 16 December 2013 (diff | hist) . . (+75) . . Test Upload of Unexpected File Types (OTG-BUSLOGIC-008)
- 13:37, 16 December 2013 (diff | hist) . . (+1,243) . . Testing for the Circumvention of Work Flows (OTG-BUSLOGIC-006)
- 13:35, 16 December 2013 (diff | hist) . . (+600) . . Test number of times a function can be used limits (OTG-BUSLOGIC-005)
- 13:34, 16 December 2013 (diff | hist) . . (+210) . . Test for Process Timing (OTG-BUSLOGIC-004)
- 13:32, 16 December 2013 (diff | hist) . . (+1,855) . . Test integrity checks (OTG-BUSLOGIC-003)
- 13:29, 16 December 2013 (diff | hist) . . (+3) . . Test business logic data validation (OTG-BUSLOGIC-001)
- 13:29, 16 December 2013 (diff | hist) . . (+2) . . Test Ability to forge requests (OTG-BUSLOGIC-002)
- 13:28, 16 December 2013 (diff | hist) . . (+446) . . Test Ability to forge requests (OTG-BUSLOGIC-002)
- 13:26, 16 December 2013 (diff | hist) . . (+415) . . Test business logic data validation (OTG-BUSLOGIC-001)
- 13:21, 16 December 2013 (diff | hist) . . (-357) . . OWASP Testing Guide v4 Table of Contents
- 13:19, 16 December 2013 (diff | hist) . . (-38) . . Testing for business logic
- 13:16, 16 December 2013 (diff | hist) . . (-1) . . Testing for business logic
- 13:15, 16 December 2013 (diff | hist) . . (+3,817) . . Testing for business logic
- 12:22, 3 December 2013 (diff | hist) . . (-239) . . OWASP Testing Guide v4 Table of Contents
- 12:10, 3 December 2013 (diff | hist) . . (-54) . . Testing for business logic
- 12:09, 3 December 2013 (diff | hist) . . (+20) . . Testing for business logic
- 12:08, 3 December 2013 (diff | hist) . . (-92) . . Testing for business logic
- 11:59, 3 December 2013 (diff | hist) . . (+95) . . Testing for business logic
- 11:51, 3 December 2013 (diff | hist) . . (0) . . OWASP Testing Guide v4 Table of Contents
- 11:49, 3 December 2013 (diff | hist) . . (+8) . . OWASP Testing Guide v4 Table of Contents
- 11:45, 3 December 2013 (diff | hist) . . (0) . . OWASP Testing Guide v4 Table of Contents
- 11:39, 3 December 2013 (diff | hist) . . (+61) . . OWASP Testing Guide v4 Table of Contents
- 11:35, 3 December 2013 (diff | hist) . . (+188) . . OWASP Testing Guide v4 Table of Contents
- 11:32, 3 December 2013 (diff | hist) . . (-310) . . OWASP Testing Guide v4 Table of Contents
- 16:26, 25 November 2013 (diff | hist) . . (-28) . . OWASP Testing Guide v4 Table of Contents
- 16:25, 25 November 2013 (diff | hist) . . (+197) . . OWASP Testing Guide v4 Table of Contents
- 16:23, 25 November 2013 (diff | hist) . . (+37) . . OWASP Testing Guide v4 Table of Contents
- 16:20, 25 November 2013 (diff | hist) . . (+1,553) . . N Test for Process Timing (OTG-BUSLOGIC-004) (Created page with "== Brief Description == It is possible that attackers can gather information on an application by monitoring the time it takes to complete a task or give a respond. Attackers...")
- 16:19, 25 November 2013 (diff | hist) . . (+105) . . OWASP Testing Guide v4 Table of Contents
- 16:17, 25 November 2013 (diff | hist) . . (0) . . OWASP Testing Guide v4 Table of Contents
- 16:15, 25 November 2013 (diff | hist) . . (+3,618) . . N Testing for the Circumvention of Work Flows (OTG-BUSLOGIC-006) (Created page with "== Brief Description == Workflow vulnerabilities involve any type of vulnerability that allows the attacker to misuse an application in a way that will allow them to circumven...")
- 16:15, 25 November 2013 (diff | hist) . . (+171) . . OWASP Testing Guide v4 Table of Contents
- 16:11, 25 November 2013 (diff | hist) . . (+1,848) . . Test number of times a function can be used limits (OTG-BUSLOGIC-005)
- 16:10, 25 November 2013 (diff | hist) . . (+1) . . OWASP Testing Guide v4 Table of Contents
- 16:08, 25 November 2013 (diff | hist) . . (0) . . OWASP Testing Guide v4 Table of Contents
- 16:07, 25 November 2013 (diff | hist) . . (0) . . OWASP Testing Guide v4 Table of Contents (Undo revision 163862 by David Fern (talk))
- 16:07, 25 November 2013 (diff | hist) . . (0) . . OWASP Testing Guide v4 Table of Contents
- 16:06, 25 November 2013 (diff | hist) . . (0) . . OWASP Testing Guide v4 Table of Contents (Undo revision 163860 by David Fern (talk))
- 16:06, 25 November 2013 (diff | hist) . . (0) . . OWASP Testing Guide v4 Table of Contents
- 15:44, 25 November 2013 (diff | hist) . . (+34) . . OWASP Testing Guide v4 Table of Contents
- 15:43, 25 November 2013 (diff | hist) . . (+3,047) . . N Test Upload of Unexpected File Types (OTG-BUSLOGIC-008) (Created page with "== Brief Description == Many application’s business processes allow for the upload and manipulation of data that is submitted via files. But the business process must check...")
- 15:42, 25 November 2013 (diff | hist) . . (+3,763) . . N Test Upload of Malicious Files (OTG-BUSLOGIC-009) (Created page with "== Brief Description == Suppose a picture sharing application allows users to upload their .gif or .jpg graphic files to the web site. What if an attacker is able to upload a...")
- 15:42, 25 November 2013 (diff | hist) . . (+251) . . OWASP Testing Guide v4 Table of Contents
- 15:34, 25 November 2013 (diff | hist) . . (+55) . . OWASP Testing Guide v4 Table of Contents
- 21:01, 8 November 2013 (diff | hist) . . (+150) . . OWASP Testing Guide Appendix B: Suggested Reading
- 12:59, 24 October 2013 (diff | hist) . . (+63) . . Business Logic Security Cheat Sheet
- 18:37, 16 October 2013 (diff | hist) . . (+4,854) . . Test integrity checks (OTG-BUSLOGIC-003)
- 17:22, 16 October 2013 (diff | hist) . . (-2) . . Test Ability to forge requests (OTG-BUSLOGIC-002)
- 17:22, 16 October 2013 (diff | hist) . . (-2) . . Test Ability to forge requests (OTG-BUSLOGIC-002)
- 17:21, 16 October 2013 (diff | hist) . . (+3) . . Test Ability to forge requests (OTG-BUSLOGIC-002)
- 17:21, 16 October 2013 (diff | hist) . . (+1) . . Test Ability to forge requests (OTG-BUSLOGIC-002)
- 17:20, 16 October 2013 (diff | hist) . . (+4,611) . . Test Ability to forge requests (OTG-BUSLOGIC-002)
- 15:09, 16 October 2013 (diff | hist) . . (+508) . . Test Ability to forge requests (OTG-BUSLOGIC-002)
- 18:02, 11 October 2013 (diff | hist) . . (-130) . . Testing for business logic
- 18:00, 11 October 2013 (diff | hist) . . (+234) . . Testing for business logic
- 17:58, 11 October 2013 (diff | hist) . . (+3,616) . . Test business logic data validation (OTG-BUSLOGIC-001)
- 17:56, 11 October 2013 (diff | hist) . . (-236) . . Testing for business logic
- 17:50, 11 October 2013 (diff | hist) . . (+236) . . Testing for business logic
- 17:49, 11 October 2013 (diff | hist) . . (-115) . . Testing for business logic
- 17:39, 11 October 2013 (diff | hist) . . (+1) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001) (current)
- 17:39, 11 October 2013 (diff | hist) . . (+342) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001)
- 17:35, 11 October 2013 (diff | hist) . . (+29) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001)
- 17:35, 11 October 2013 (diff | hist) . . (+1,071) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001)
- 16:20, 11 October 2013 (diff | hist) . . (-11) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001)
- 16:19, 11 October 2013 (diff | hist) . . (+2) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001)
- 16:17, 11 October 2013 (diff | hist) . . (+10) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001)
- 16:17, 11 October 2013 (diff | hist) . . (-2) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001)
- 16:16, 11 October 2013 (diff | hist) . . (+319) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001)
- 16:11, 11 October 2013 (diff | hist) . . (+270) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001)
- 16:05, 11 October 2013 (diff | hist) . . (+176) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001)
- 15:57, 11 October 2013 (diff | hist) . . (+79) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001)
- 15:54, 11 October 2013 (diff | hist) . . (+10) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001)
- 15:53, 11 October 2013 (diff | hist) . . (+17) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001)
- 15:53, 11 October 2013 (diff | hist) . . (+3) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001)
- 15:52, 11 October 2013 (diff | hist) . . (-2) . . 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001)
- 15:51, 11 October 2013 (diff | hist) . . (+1,464) . . N 4.12.1 Test Business Logic Data Validation (OTG-BUSLOGIC-001) (Created page with "== Brief Description == The application must ensure that only valid data can be entered at the front end as well as directly to the server side. Only verifying data on the fr...")
- 18:11, 10 October 2013 (diff | hist) . . (+162) . . N Test defenses against application mis-use (OTG-BUSLOGIC-007) (Created page with "== Brief Description == == Issue == == Example == == Testing Method == == Test Tools == == Related Test Cases == == References == == Remediation ==")
- 18:11, 10 October 2013 (diff | hist) . . (+162) . . N Test security incident reporting information (OTG-BUSLOGIC-010) (Created page with "== Brief Description == == Issue == == Example == == Testing Method == == Test Tools == == Related Test Cases == == References == == Remediation ==") (current)
- 18:11, 10 October 2013 (diff | hist) . . (+162) . . N Test self-hosted payment cardholder data processing (OTG-BUSLOGIC-009) (Created page with "== Brief Description == == Issue == == Example == == Testing Method == == Test Tools == == Related Test Cases == == References == == Remediation ==") (current)
- 18:11, 10 October 2013 (diff | hist) . . (+162) . . N Test bypass of correct sequence (OTG-BUSLOGIC-008) (Created page with "== Brief Description == == Issue == == Example == == Testing Method == == Test Tools == == Related Test Cases == == References == == Remediation ==") (current)
- 18:11, 10 October 2013 (diff | hist) . . (+162) . . N Test number of times a function can be used limits (OTG-BUSLOGIC-005) (Created page with "== Brief Description == == Issue == == Example == == Testing Method == == Test Tools == == Related Test Cases == == References == == Remediation ==")
- 18:10, 10 October 2013 (diff | hist) . . (+162) . . N Test size of request limits (OTG-BUSLOGIC-006) (Created page with "== Brief Description == == Issue == == Example == == Testing Method == == Test Tools == == Related Test Cases == == References == == Remediation ==") (current)
- 18:10, 10 October 2013 (diff | hist) . . (+162) . . N Test excessive rate (speed) of use limits (OTG-BUSLOGIC-005) (Created page with "== Brief Description == == Issue == == Example == == Testing Method == == Test Tools == == Related Test Cases == == References == == Remediation ==") (current)
- 18:10, 10 October 2013 (diff | hist) . . (+162) . . N Test tamper evidence (OTG-BUSLOGIC-004) (Created page with "== Brief Description == == Issue == == Example == == Testing Method == == Test Tools == == Related Test Cases == == References == == Remediation ==") (current)
- 18:10, 10 October 2013 (diff | hist) . . (+162) . . N Test integrity checks (OTG-BUSLOGIC-003) (Created page with "== Brief Description == == Issue == == Example == == Testing Method == == Test Tools == == Related Test Cases == == References == == Remediation ==")
- 18:10, 10 October 2013 (diff | hist) . . (+162) . . N Test Ability to forge requests (OTG-BUSLOGIC-002) (Created page with "== Brief Description == == Issue == == Example == == Testing Method == == Test Tools == == Related Test Cases == == References == == Remediation ==")
- 18:09, 10 October 2013 (diff | hist) . . (+162) . . N Test business logic data validation (OTG-BUSLOGIC-001) (Created page with "== Brief Description == == Issue == == Example == == Testing Method == == Test Tools == == Related Test Cases == == References == == Remediation ==")
- 18:26, 9 October 2013 (diff | hist) . . (-17,589) . . Testing for business logic
- 18:26, 9 October 2013 (diff | hist) . . (+2) . . Testing for business logic
- 18:24, 9 October 2013 (diff | hist) . . (+13) . . Testing for business logic
- 18:24, 9 October 2013 (diff | hist) . . (+3) . . Testing for business logic
- 18:23, 9 October 2013 (diff | hist) . . (+64) . . Testing for business logic
- 18:22, 9 October 2013 (diff | hist) . . (+8) . . Testing for business logic
- 18:21, 9 October 2013 (diff | hist) . . (+3,213) . . Testing for business logic
- 18:19, 9 October 2013 (diff | hist) . . (-1,485) . . Testing for business logic
- 02:32, 22 July 2013 (diff | hist) . . (+53) . . OWASP Periodic Table of Vulnerabilities - SSI Injection (current)
- 02:30, 22 July 2013 (diff | hist) . . (+1,423) . . N OWASP Periodic Table of Vulnerabilities - SSI Injection (Created page with "Return to Periodic Table Working View === SSI Injection === == Root Cause Summary == The root ...")
- 01:50, 22 July 2013 (diff | hist) . . (-1) . . OWASP Periodic Table of Vulnerabilities - Improper Output Handling (current)
- 01:50, 22 July 2013 (diff | hist) . . (+1,260) . . N OWASP Periodic Table of Vulnerabilities - Improper Output Handling (Created page with "Return to Periodic Table Working View === Improper Output Handling === == Root Cause Summary ==...")
- 01:08, 22 July 2013 (diff | hist) . . (+1,391) . . N OWASP Periodic Table of Vulnerabilities - Improper Input Handling (Created page with "Return to Periodic Table Working View === Improper Input Handling === == Root Cause Summary == ...") (current)
- 18:29, 21 July 2013 (diff | hist) . . (+1) . . OWASP Periodic Table of Vulnerabilities - Improper Filesystem Permissions (current)
- 18:29, 21 July 2013 (diff | hist) . . (-44) . . OWASP Periodic Table of Vulnerabilities - Improper Filesystem Permissions
- 18:28, 21 July 2013 (diff | hist) . . (-1) . . OWASP Periodic Table of Vulnerabilities - Improper Filesystem Permissions
- 18:28, 21 July 2013 (diff | hist) . . (+1,116) . . N OWASP Periodic Table of Vulnerabilities - Improper Filesystem Permissions (Created page with "Return to Periodic Table Working View === Improper Filesystem Permissions === == Root Cause Sum...")
- 18:11, 21 July 2013 (diff | hist) . . (-31) . . OWASP Periodic Table of Vulnerabilities - Denial of Service (Application Based) (current)
- 18:10, 21 July 2013 (diff | hist) . . (+40) . . OWASP Periodic Table of Vulnerabilities - Denial of Service (Application Based)
- 18:09, 21 July 2013 (diff | hist) . . (+119) . . OWASP Periodic Table of Vulnerabilities - Format String (current)
- 18:05, 21 July 2013 (diff | hist) . . (-2) . . OWASP Periodic Table of Vulnerabilities - Format String
- 18:04, 21 July 2013 (diff | hist) . . (-1) . . OWASP Periodic Table of Vulnerabilities - Format String
- 18:04, 21 July 2013 (diff | hist) . . (+1,417) . . N OWASP Periodic Table of Vulnerabilities - Format String (Created page with "Return to Periodic Table Working View === Format String === == Root Cause Summary == The root ...")
- 04:28, 21 July 2013 (diff | hist) . . (+1) . . OWASP Periodic Table of Vulnerabilities - Denial of Service (Application Based)
- 04:28, 21 July 2013 (diff | hist) . . (-2) . . OWASP Periodic Table of Vulnerabilities - Denial of Service (Application Based)
- 04:27, 21 July 2013 (diff | hist) . . (+1,557) . . N OWASP Periodic Table of Vulnerabilities - Denial of Service (Application Based) (Created page with "Return to Periodic Table Working View === Denial of Service (Application Based) === == Root Cau...")
- 03:49, 21 July 2013 (diff | hist) . . (+158) . . OWASP Periodic Table of Vulnerabilities - Cross-Site Scripting (XSS) - DOM-Based
- 03:47, 21 July 2013 (diff | hist) . . (+1,209) . . N OWASP Periodic Table of Vulnerabilities - Cross-Site Scripting (XSS) - DOM-Based (Created page with "=== Cross-Site Scripting (XSS) - DOM-Based === == Root Cause Summary == The root cause of DOM based XSS is allowing the DOM on the victim’s browser (client-side scripts s...")
- 03:24, 21 July 2013 (diff | hist) . . (+1) . . OWASP Periodic Table of Vulnerabilities - Cross-Site Request Forgery
- 03:23, 21 July 2013 (diff | hist) . . (+4) . . OWASP Periodic Table of Vulnerabilities - Cross-Site Request Forgery
- 03:22, 21 July 2013 (diff | hist) . . (+117) . . OWASP Periodic Table of Vulnerabilities - Cross-Site Request Forgery
- 03:21, 21 July 2013 (diff | hist) . . (+2,105) . . N OWASP Periodic Table of Vulnerabilities - Cross-Site Request Forgery (Created page with "=== Cross-Site Request Forgery (CSRF ) === == Root Cause Summary == The root cause of CSRF is the Web site trusting the Web authentication or cookie-based session IDs witho...")
- 15:52, 25 June 2013 (diff | hist) . . (-14) . . Testing for business logic
- 15:51, 25 June 2013 (diff | hist) . . (+14) . . Testing for business logic
- 15:49, 25 June 2013 (diff | hist) . . (-2) . . Testing for business logic
- 15:49, 25 June 2013 (diff | hist) . . (0) . . Testing for business logic
- 15:48, 25 June 2013 (diff | hist) . . (+6) . . Testing for business logic
- 15:48, 25 June 2013 (diff | hist) . . (+2,602) . . Testing for business logic
- 20:04, 24 June 2013 (diff | hist) . . (+822) . . OWASP Periodic Table of Vulnerabilities - Cross-Site Scripting (XSS)
- 17:20, 24 June 2013 (diff | hist) . . (-1) . . OWASP Periodic Table of Vulnerabilities - Cross-Site Scripting (XSS)
- 17:20, 24 June 2013 (diff | hist) . . (+677) . . OWASP Periodic Table of Vulnerabilities - Cross-Site Scripting (XSS)
- 01:39, 20 June 2013 (diff | hist) . . (+1,246) . . N OWASP Periodic Table of Vulnerabilities - Cross-Site Scripting (XSS) (Created page with "Return to Periodic Table Working View == Cross-Site Scripting (XSS)== === Root Cause Summary ==...")
- 11:25, 6 June 2013 (diff | hist) . . (+1,198) . . OWASP Periodic Table of Vulnerabilities - Abuse of Functionality
- 02:20, 6 June 2013 (diff | hist) . . (+1) . . OWASP Periodic Table of Vulnerabilities - Abuse of Functionality
- 02:19, 6 June 2013 (diff | hist) . . (+312) . . OWASP Periodic Table of Vulnerabilities - Abuse of Functionality
- 02:08, 6 June 2013 (diff | hist) . . (+91) . . OWASP Periodic Table of Vulnerabilities - Abuse of Functionality
- 02:07, 6 June 2013 (diff | hist) . . (+423) . . N OWASP Periodic Table of Vulnerabilities - Abuse of Functionality (Created page with "Return to Periodic Table Working View == Abuse of Functionality == === Root Cause Summary === ...")
- 02:03, 6 June 2013 (diff | hist) . . (-12) . . OWASP Periodic Table of Vulnerabilities - Application Misconfiguration
- 02:02, 6 June 2013 (diff | hist) . . (0) . . OWASP Periodic Table of Vulnerabilities - Application Misconfiguration
- 02:01, 6 June 2013 (diff | hist) . . (+1,173) . . OWASP Periodic Table of Vulnerabilities - Application Misconfiguration
- 19:39, 5 June 2013 (diff | hist) . . (+14) . . OWASP Periodic Table of Vulnerabilities - Application Misconfiguration
- 19:04, 5 June 2013 (diff | hist) . . (-120) . . OWASP Periodic Table of Vulnerabilities - Application Misconfiguration
- 18:57, 5 June 2013 (diff | hist) . . (-2) . . OWASP Periodic Table of Vulnerabilities - Application Misconfiguration
- 18:57, 5 June 2013 (diff | hist) . . (+123) . . OWASP Periodic Table of Vulnerabilities - Application Misconfiguration
- 18:46, 5 June 2013 (diff | hist) . . (-4) . . OWASP Periodic Table of Vulnerabilities - Application Misconfiguration
- 18:45, 5 June 2013 (diff | hist) . . (+29) . . OWASP Periodic Table of Vulnerabilities - Application Misconfiguration
- 18:44, 5 June 2013 (diff | hist) . . (+237) . . OWASP Periodic Table of Vulnerabilities - Application Misconfiguration
- 18:32, 5 June 2013 (diff | hist) . . (+410) . . N OWASP Periodic Table of Vulnerabilities - Application Misconfiguration (Created page with "Return to Periodic Table Working View == Application Misconfiguration == === Root Cause Summary...")
- 00:06, 10 February 2013 (diff | hist) . . (+4) . . Testing for business logic
- 23:57, 9 February 2013 (diff | hist) . . (-280) . . Testing for business logic
- 23:55, 9 February 2013 (diff | hist) . . (0) . . Testing for business logic
- 23:53, 9 February 2013 (diff | hist) . . (+1) . . Testing for business logic
- 23:52, 9 February 2013 (diff | hist) . . (+1,886) . . Testing for business logic
- 23:47, 9 February 2013 (diff | hist) . . (0) . . Testing for business logic
- 23:47, 9 February 2013 (diff | hist) . . (0) . . Testing for business logic
- 23:45, 9 February 2013 (diff | hist) . . (-242) . . Testing for business logic
- 23:44, 9 February 2013 (diff | hist) . . (+2,096) . . Testing for business logic
- 23:41, 9 February 2013 (diff | hist) . . (-409) . . Testing for business logic
- 23:40, 9 February 2013 (diff | hist) . . (+1) . . Testing for business logic
- 23:39, 9 February 2013 (diff | hist) . . (-9) . . Testing for business logic
- 23:38, 9 February 2013 (diff | hist) . . (+19) . . Testing for business logic
- 23:36, 9 February 2013 (diff | hist) . . (+804) . . Testing for business logic
- 23:34, 9 February 2013 (diff | hist) . . (+1) . . Testing for business logic
- 18:02, 9 February 2013 (diff | hist) . . (+201) . . Testing for business logic
- 03:50, 1 December 2012 (diff | hist) . . (-6) . . m OWASP Testing Guide v4 Table of Contents
- 16:46, 21 November 2012 (diff | hist) . . (+2) . . OWASP Testing Guide Appendix B: Suggested Reading
- 16:39, 21 November 2012 (diff | hist) . . (+3) . . OWASP Testing Guide Appendix B: Suggested Reading
- 16:38, 21 November 2012 (diff | hist) . . (-3) . . OWASP Testing Guide Appendix B: Suggested Reading
- 16:38, 21 November 2012 (diff | hist) . . (+3) . . OWASP Testing Guide Appendix B: Suggested Reading
- 16:37, 21 November 2012 (diff | hist) . . (+3) . . OWASP Testing Guide Appendix B: Suggested Reading
- 16:36, 21 November 2012 (diff | hist) . . (+7) . . OWASP Testing Guide Appendix B: Suggested Reading
- 16:12, 21 November 2012 (diff | hist) . . (+1,252) . . OWASP Testing Guide Appendix B: Suggested Reading
- 16:06, 21 November 2012 (diff | hist) . . (-4) . . OWASP Testing Guide Appendix B: Suggested Reading
- 16:06, 21 November 2012 (diff | hist) . . (+414) . . OWASP Testing Guide Appendix B: Suggested Reading
- 16:03, 21 November 2012 (diff | hist) . . (0) . . OWASP Testing Guide Appendix B: Suggested Reading
- 16:03, 21 November 2012 (diff | hist) . . (+1,500) . . OWASP Testing Guide Appendix B: Suggested Reading
- 16:00, 21 November 2012 (diff | hist) . . (+6) . . OWASP Testing Guide Appendix B: Suggested Reading
- 15:58, 21 November 2012 (diff | hist) . . (+1,078) . . OWASP Testing Guide Appendix B: Suggested Reading
- 15:56, 21 November 2012 (diff | hist) . . (+210) . . OWASP Testing Guide Appendix B: Suggested Reading
- 15:54, 21 November 2012 (diff | hist) . . (+56) . . OWASP Testing Guide Appendix B: Suggested Reading
- 21:26, 7 November 2012 (diff | hist) . . (-134) . . Appendix A: Testing Tools
- 21:17, 7 November 2012 (diff | hist) . . (+196) . . Appendix A: Testing Tools
- 21:16, 7 November 2012 (diff | hist) . . (+184) . . Appendix A: Testing Tools
- 21:15, 7 November 2012 (diff | hist) . . (+251) . . Appendix A: Testing Tools
- 17:37, 7 November 2012 (diff | hist) . . (+261) . . Appendix A: Testing Tools (Fixed links)
- 17:26, 7 November 2012 (diff | hist) . . (+202) . . Appendix A: Testing Tools
- 17:23, 7 November 2012 (diff | hist) . . (+69) . . Appendix A: Testing Tools
- 17:48, 6 November 2012 (diff | hist) . . (+73) . . m OWASP Testing Guide Appendix B: Suggested Reading (Added Build Security In Web Site)
- 17:21, 6 November 2012 (diff | hist) . . (+9) . . m Testing for Incubated Vulnerability (OTG-INPVAL-015) (Updated Burp URL)
- 17:18, 6 November 2012 (diff | hist) . . (-536) . . m Testing for Stack Overflow ("Defeating Stack Based Buffer Overflow Prevention Mechanism of Windows 2003 Server" removed can not find a valid URL, Updated Aleph One Article URL,)
- 17:11, 6 November 2012 (diff | hist) . . (-117) . . m Testing for Heap Overflow (Remove Alex Wheeler article since no valid link can be found.)
- 17:10, 6 November 2012 (diff | hist) . . (-3) . . m Testing for Heap Overflow (Updated Heap Overflow tutorial URL)
- 17:05, 6 November 2012 (diff | hist) . . (-6) . . m Testing for ORM Injection (OTG-INPVAL-007) (Updated link to Nhibernate)
- 17:03, 6 November 2012 (diff | hist) . . (+31) . . m Testing for LDAP Injection (OTG-INPVAL-006) (Updated URL for Sacha Faust article)
- 17:01, 6 November 2012 (diff | hist) . . (-96) . . m OWASP Backend Security Project Testing PostgreSQL (Removed Cheat Sheet, link did not work)
- 16:57, 6 November 2012 (diff | hist) . . (-14) . . m Testing for SQL Server (Updated URL for Davd Litchfield Article, Updated URL for more Advanced SQK Injection, Updated link to Paul Litwin' article, Updated sqlmap URL,)
- 16:54, 6 November 2012 (diff | hist) . . (-133) . . m Testing for MySQL (Updated URL for Hackprofing sql, Update sqlmap URL, removed Antonio Parata article since it can not be found)
- 16:50, 6 November 2012 (diff | hist) . . (+85) . . Testing for Oracle (Updates Hackproofing URL, Update orascan URL)
- 16:46, 6 November 2012 (diff | hist) . . (+6) . . m Testing for SQL Injection (OTG-INPVAL-005) (Updated link to more Advanced SQL Injection)
- 16:44, 6 November 2012 (diff | hist) . . (-50) . . m Testing for SQL Injection (OTG-INPVAL-005) (Update 2 broken URLs)
- 16:43, 6 November 2012 (diff | hist) . . (-3) . . m Testing for SQL Injection (OTG-INPVAL-005) (Update URL to teh Cheat Sheet)
- 16:41, 6 November 2012 (diff | hist) . . (-11) . . m Testing for SQL Injection (OTG-INPVAL-005) (Updated Sqlmap)
- 16:40, 6 November 2012 (diff | hist) . . (-38) . . m Testing for SQL Injection (OTG-INPVAL-005) (Updated SQL Dumper URL)
- 16:30, 6 November 2012 (diff | hist) . . (-4) . . m Testing for SQL Injection (OTG-INPVAL-005) (Corrected URL for Chris Anley link, David Lintchfield URL,)
- 16:26, 6 November 2012 (diff | hist) . . (-163) . . m Testing for Stored Cross site scripting (OTG-INPVAL-002) (Remove broken link to "Aung Khant: "What XSS Can do - Benefits of XSS From Attacker's view" - No replacement found, Updated Amit Klien 's link, Updated URL to CGI Security, Update BEEF URL, Updated Burp URL, Updated XSS Assistant link)
- 16:19, 6 November 2012 (diff | hist) . . (+9) . . m Testing for Stored Cross site scripting (OTG-INPVAL-002) (Update Burp URL,)
- 16:17, 6 November 2012 (diff | hist) . . (+23) . . m Testing for Privilege escalation (OTG-AUTHZ-003) (Added more detail to Wiki entry)
- 16:13, 6 November 2012 (diff | hist) . . (-1) . . m Testing for cookies attributes (OTG-SESS-002) (Corrected Burp Proxy URL)
- 16:03, 6 November 2012 (diff | hist) . . (0) . . m Review Old, Backup and Unreferenced Files for Sensitive Information (OTG-CONFIG-004) (Updated Nikto to Nikto2 to match their Web Site)
- 15:58, 6 November 2012 (diff | hist) . . (+5) . . m Enumerate Applications on Webserver (OTG-INFO-004) (Updated the net-Square URL, Update tomDNS URL,)
- 15:52, 6 November 2012 (diff | hist) . . (-226) . . Conduct search engine discovery/reconnaissance for information leakage (OTG-INFO-001) (Removed Footnote 3 and 4 which are invalid and I can not find a substitute)
- 15:48, 6 November 2012 (diff | hist) . . (0) . . Conduct search engine discovery/reconnaissance for information leakage (OTG-INFO-001)
- 15:47, 6 November 2012 (diff | hist) . . (-2) . . m Conduct search engine discovery/reconnaissance for information leakage (OTG-INFO-001) (Updated refering document name)
- 15:46, 6 November 2012 (diff | hist) . . (+41) . . m Conduct search engine discovery/reconnaissance for information leakage (OTG-INFO-001) (Updated URLs)
- 15:43, 6 November 2012 (diff | hist) . . (+3) . . m Review Webserver Metafiles for Information Leakage (OTG-INFO-003) (Updated URLs)
- 15:40, 6 November 2012 (diff | hist) . . (+5) . . m The OWASP Testing Framework (Updated link)
- 15:38, 6 November 2012 (diff | hist) . . (-211) . . m Testing Guide Introduction (Removed invalid link and correct article name)
- 14:23, 6 November 2012 (diff | hist) . . (+5) . . m Testing Guide Introduction (Updated link to NIST Economic Document)
- 14:17, 6 November 2012 (diff | hist) . . (-81) . . m Appendix A: Testing Tools (Removed Fortify Pen Testing Team Tool)
- 14:04, 6 November 2012 (diff | hist) . . (-216) . . Testing for CSRF (OTG-SESS-005)