AccessControl
| Parameter Analysis | OWASP-AC-001 |
| Authorization | OWASP-AC-002 |
| Authorization Parameter Manipulation | OWASP-AC-003 |
| Authorized pages/functions | OWASP-AC-004 |
| Application Workflow | OWASP-AC-005 |
mostrar más...
Authentication
| Authentication endpoint request should be HTTPS | OWASP-AUTHN-001 |
| Authentication bypass | OWASP-AUTHN-002 |
| Credentials transport over an encrypted channel | OWASP-AUTHN-003 |
| Default Accounts | OWASP-AUTHN-004 |
| Username | OWASP-AUTHN-005 |
| Password Quality | OWASP-AUTHN-006 |
| Password Reset | OWASP-AUTHN-007 |
| Password Lockout | OWASP-AUTHN-008 |
| Password Structure | OWASPAUTHN-009 |
| Blank Passwords | OWASPAUTHN-010 |
mostrar más...
AuthenticationSessionManagement
| Session Token Length | OWASP-AUTHSM-001 |
| Session Timeout | OWASP-AUTHSM-002 |
| Session Reuse | OWASP-AUTHSM-003 |
| Session Deletion | OWASP-AUTHSM-004 |
| Session Token Format | OWASP-AUTHSM-005 |
mostrar más...
Configuration
| HTTP Methods | OWASP-CM-001 |
| Virtually Hosted Sites | OWASP-CM-002 |
| Known Vulnerabilities / Security Patches | OWASP-CM-003 |
| Web Server Configuration | OWASP-CM004 |
| Web Server Components | OWASP-CM005 |
| Common Paths | OWASP-CM006 |
| Language/Application defaults | OWASP-CM007 |
| Infrastructure Admin Interfaces | OWASP-CM008 |
| Application Admin Interfaces | OWASP-CM009 |
mostrar más...
DataProtection
| Sensitive Data in HTML | OWASP-DP001 |
| Data Storage | OWASP-DP002 |
| SSL Version | OWASP-DP003 |
| SSL Key Exchange Methods | OWASP-DP004 |
| SSL Algorithms | OWASP-DP005 |
| SSL Key Lengths | OWASP-DP006 |
| Digital Certificate Validity | OWASP-DP007 |
mostrar más...
InputValidation
| Script Injection | OWASP-IV001 |
| SQL Injection | OWASP-IV002 |
| OS Command Injection | OWASP-IV003 |
| LDAP Injection | OWASP-IV004 |
| Cross Site Scripting | OWASP-IV005 |
mostrar más...
BufferOverflow
| Overflows | OWASP-BO001 |
| Heap Overflows | OWASP-BO002 |
| Stack Overflows | OWASP-BO003 |
| Format Strings | OWASP-BO004 |
mostrar más...