OWASP Testing Guide
search
Ctrlk
OWASP Testing Guide
  • Foreword by Eoin Keary
  • Frontispiece
  • Introduction
  • The OWASP Testing Framework
  • Web Application Security Testing
    • Introduction and Objectives
    • Information Gathering
    • Configuration and Deployment Management Testing
    • Identity Management Testing
    • Authentication Testing
    • Authorization Testing
      • Testing Directory Traversal File Include (WSTG-ATHZ-01)
      • Testing for Bypassing Authorization Schema (WSTG-ATHZ-02)
      • Testing for Privilege Escalation (WSTG-ATHZ-03)
      • Testing for Insecure Direct Object References (WSTG-ATHZ-04)
      • Testing for OAuth Authorization Server Weaknesses
      • Testing for OAuth Client Weaknesses
      • Testing for OAuth Weaknesses (WSTG-ATHZ-05)
    • Session Management Testing
    • Input Validation Testing
    • Testing for Error Handling
    • Testing for Weak Cryptography
    • Business Logic Testing
    • Client-Side Testing
    • API Testing
  • Reporting
  • Appendix
  • Testing Checklist
  • Table of Contents
  • REST Assessment Cheat Sheet
  • API Testing
gitbookPowered by GitBook
block-quoteOn this pagechevron-down
  1. Web Application Security Testing

Authorization Testing

4.5.1 Testing Directory Traversal File Include

4.5.2 Testing for Bypassing Authorization Schema

4.5.3 Testing for Privilege Escalation

4.5.4 Testing for Insecure Direct Object References

4.5.5 Testing for OAuth Weaknesses

4.5.5.1 Testing for OAuth Authorization Server Weaknesses

4.5.5.2 Testing for OAuth Client Weaknesses

PreviousTesting Multi-Factor Authentication (MFA) (WSTG-AUTH-11)chevron-leftNextTesting Directory Traversal File Include (WSTG-ATHZ-01)chevron-right

Last updated 3 years ago