This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Testing for cookies attributes (OTG-SESS-002)"
(New page: {{Template:OWASP Testing Guide v3}} '''This is a draft of a section of the new Testing Guide v3''' == Brief Summary == <br> ..here: we describe in "natural language" what we want to test...) |
(→Brief Summary) |
||
| Line 5: | Line 5: | ||
== Brief Summary == | == Brief Summary == | ||
<br> | <br> | ||
| − | . | + | Cookies are often a key attack vector for malicious users and as such the application should always take due diligence to protect them. In this section we will look at how an application can take the necessary precautions when assigning cookies and how to test that these attributes have been correctly configured. |
<br> | <br> | ||
| + | |||
== Description of the Issue == | == Description of the Issue == | ||
<br> | <br> | ||
Revision as of 02:05, 8 June 2008
OWASP Testing Guide v3 Table of Contents
This article is part of the OWASP Testing Guide v3. The entire OWASP Testing Guide v3 can be downloaded here.
OWASP at the moment is working at the OWASP Testing Guide v4: you can browse the Guide here
This is a draft of a section of the new Testing Guide v3
Brief Summary
Cookies are often a key attack vector for malicious users and as such the application should always take due diligence to protect them. In this section we will look at how an application can take the necessary precautions when assigning cookies and how to test that these attributes have been correctly configured.
Description of the Issue
...here: Short Description of the Issue: Topic and Explanation
Black Box testing and example
Testing for Topic X vulnerabilities:
...
Result Expected:
...
Gray Box testing and example
Testing for Topic X vulnerabilities:
...
Result Expected:
...
References
Whitepapers
...
Tools
...
