This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Testing for HTTP Incoming requests (OTG-INPVAL-017)

From OWASP
Revision as of 22:49, 9 April 2016 by Tony Hsu HsiangChih (talk | contribs) (Summary)

Jump to: navigation, search

Summary

This section describes how to monitor all incoming/outgoing http requests on both client or web server side. The purpose of this testing is to verify if there is unnecessary or suspicious http request sending in the background.

Test Objectives

How to Test

Tools

References