Type something in the input field to search the table:
| Web OWASP Category | Checks | Tools used |
|---|---|---|
| Information Gathering | ✔ Manually explore the site | YES |
| Information Gathering | ✔ Spider/crawl for missed or hidden content | YES |
| Information Gathering | ✔ Check for files that expose content, such as robots.txt, sitemap.xml, .DS_Store | YES |
| Information Gathering | ✔ Check the caches of major search engines for publicly accessible sites | YES |
| Information Gathering | ✔ Check for differences in content based on User Agent (eg, Mobile sites, access as a Search engine Crawler) | YES |
| Information Gathering | ✔ Perform Web Application Fingerprinting | YES |
| Information Gathering | ✔ Identify technologies used | YES |
| Information Gathering | ✔ Identify user roles | YES |
| Information Gathering | ✔ Identify application entry points | YES |
| Information Gathering | ✔ Identify client-side code | YES |
| Information Gathering | ✔ Identify multiple versions/channels (e.g., web, mobile web, mobile app, web services) | YES |
| Information Gathering | ✔ Identify co-hosted and related applications | YES |
| Information Gathering | ✔ Identify all hostnames and ports | YES |
| Information Gathering | ✔ Identify third-party hosted content | YES |
| Configuration Management | ✔ Check for commonly used application and administrative URLs | YES |
| Configuration Management | ✔ Check for old, backup and unreferenced files | YES |
| Configuration Management | ✔ Check HTTP methods supported and Cross Site Tracing (XST) | YES |
| Configuration Management | ✔ Test file extensions handling | YES |
| Configuration Management | ✔ Test for security HTTP headers (e.g., CSP, X-Frame-Options, HSTS) | YES |
| Configuration Management | ✔ Test for policies (e.g., Flash, Silverlight, robots) | YES |
| Configuration Management | ✔ Test for non-production data in live environment, and vice-versa | YES |
| Configuration Management | ✔ Check for sensitive data in client-side code (e.g., API keys, credentials) | YES |
| Secure Transmission | ✔ Check SSL Version, Algorithms, Key length | YES |
| Secure Transmission | ✔ Check for Digital Certificate Validity (Duration, Signature and CN) | YES |
| Secure Transmission | ✔ Check credentials only delivered over HTTPS | YES |
| Secure Transmission | ✔ Check that the login form is delivered over HTTPS | YES |
| Secure Transmission | ✔ Check session tokens only delivered over HTTPS | YES |
| Secure Transmission | ✔ Check if HTTP Strict Transport Security (HSTS) in use | YES |
| Authentication | ✔ Test for user enumeration | YES |
| Authentication | ✔ Test for authentication bypass | YES |
| Authentication | ✔ Test for brute force protection | YES |
| Authentication | ✔ Test password quality rules | YES |
| Authentication | ✔ Test remember me functionality | YES |
| Authentication | ✔ Test for autocomplete on password forms/input | YES |
| Authentication | ✔ Test password reset and/or recovery | YES |
| Authentication | ✔ Test password change process | YES |
| Authentication | ✔ Test CAPTCHA | YES |
| Authentication | ✔ Test multi factor authentication | YES |
| Authentication | ✔ Test for logout functionality presence | YES |
| Authentication | ✔ Test for cache management on HTTP (e.g., Pragma, Expires, Max-age) | YES |
| Authentication | ✔ Test for default logins | YES |
| Authentication | ✔ Test for user-accessible authentication history | YES |
| Authentication | ✔ Test for out-of channel notification of account lockouts and successful password changes | YES |
| Authentication | ✔ Test for consistent authentication across applications with shared authentication schema / SSO | YES |
| Session Management | ✔ Establish how session management is handled in the application (e.g., tokens in cookies, token in URL) | YES |
| Session Management | ✔ Check session tokens for cookie flags (HTTPOnly and secure) | YES |
| Session Management | ✔ Check session cookie scope (path and domain) | YES |
| Session Management | ✔ Check session cookie duration (expires and max age) | YES |
| Session Management | ✔ Check session termination after a maximum lifetime | YES |
| Session Management | ✔ Check session termination after relative timeout | YES |
| Session Management | ✔ Check session termination after logout | YES |
| Session Management | ✔ Test to see if users can have multiple simultaneous sessions | YES |
| Session Management | ✔ Test session cookies for randomness | YES |
| Session Management | ✔ Confirm that new session tokens are issued on login, role change and logout | YES |
| Session Management | ✔ Test for consistent session management across applications with shared session management | YES |
| Session Management | ✔ Test for session puzzling | YES |
| Session Management | ✔ Test for CSRF and clickjacking | YES |
| Authorization | ✔ Test for path traversal | YES |
| Authorization | ✔ Test for bypassing authorization schema | YES |
| Authorization | ✔ Test for vertical Access control problems (a.k.a. Privilege Escalation) | YES |
| Authorization | ✔ Test for horizontal Access control problems (between two users at the same privilege level) | YES |
| Authorization | ✔ Test for missing authorization | YES |
| Data Validation | ✔ Test for Reflected Cross Site Scripting | YES |
| Data Validation | ✔ Test for Stored Cross Site Scripting | YES |
| Data Validation | ✔ Test for DOM based Cross Site Scripting | YES |
| Data Validation | ✔ Test for Cross Site Flashing | YES |
| Data Validation | ✔ Test for HTML Injection | YES |
| Data Validation | ✔ Test for SQL Injection | YES |
| Data Validation | ✔ Test for LDAP Injection | YES |
| Data Validation | ✔ Test for ORM Injection | YES |
| Data Validation | ✔ Test for XML Injection | YES |
| Data Validation | ✔ Test for XXE Injection | YES |
| Data Validation | ✔ Test for SSI Injection | YES |
| Data Validation | ✔ Test for XPath Injection | YES |
| Data Validation | ✔ Test for XQuery Injection | YES |
| Data Validation | ✔ Test for IMAP/SMTP Injection | YES |
| Data Validation | ✔ Test for Code Injection | YES |
| Data Validation | ✔ Test for Expression Language Injection | YES |
| Data Validation | ✔ Test for Command Injection | YES |
| Data Validation | ✔ Test for Overflow (Stack, Heap and Integer) | YES |
| Data Validation | ✔ Test for Format String | YES |
| Data Validation | ✔ Test for incubated vulnerabilities | YES |
| Data Validation | ✔ Test for HTTP Splitting/Smuggling | YES |
| Data Validation | ✔ Test for HTTP Verb Tampering | YES |
| Data Validation | ✔ Test for Open Redirection | YES |
| Data Validation | ✔ Test for Local File Inclusion | YES |
| Data Validation | ✔ Test for Remote File Inclusion | YES |
| Data Validation | ✔ Compare client-side and server-side validation rules | YES |
| Data Validation | ✔ Test for NoSQL injection | YES |
| Data Validation | ✔ Test for HTTP parameter pollution | YES |
| Data Validation | ✔ Test for auto-binding | YES |
| Data Validation | ✔ Test for Mass Assignment | YES |
| Data Validation | ✔ Test for NULL/Invalid Session Cookie | YES |
| Denial of Service | ✔ Test for anti-automation | YES |
| Denial of Service | ✔ Test for account lockout | YES |
| Denial of Service | ✔ Test for HTTP protocol DoS | YES |
| Denial of Service | ✔ Test for SQL wildcard DoS | YES |
| Business Logic | ✔ Test for feature misuse | YES |
| Business Logic | ✔ Test for lack of non-repudiation | YES |
| Business Logic | ✔ Test for trust relationships | YES |
| Business Logic | ✔ Test for integrity of data | YES |
| Business Logic | ✔ Test segregation of duties | YES |
| Cryptography | ✔ Check if data which should be encrypted is not | YES |
| Cryptography | ✔ Check for wrong algorithms usage depending on context | YES |
| Cryptography | ✔ Check for weak algorithms usage | YES |
| Cryptography | ✔ Check for proper use of salting | YES |
| Cryptography | ✔ Check for randomness functions | YES |
| Risky Functionality - File Uploads | ✔ Test that acceptable file types are whitelisted | YES |
| Risky Functionality - File Uploads | ✔ Test that file size limits, upload frequency and total file counts are defined and are enforced | YES |
| Risky Functionality - File Uploads | ✔ Test that file contents match the defined file type | YES |
| Risky Functionality - File Uploads | ✔ Test that all file uploads have Anti-Virus scanning in-place. | YES |
| Risky Functionality - File Uploads | ✔ Test that unsafe filenames are sanitised | YES |
| Risky Functionality - File Uploads | ✔ Test that uploaded files are not directly accessible within the web root | YES |
| Risky Functionality - File Uploads | ✔ Test that uploaded files are not served on the same hostname/port | YES |
| Risky Functionality - File Uploads | ✔ Test that files and other media are integrated with the authentication and authorisation schemas | YES |
| Risky Functionality - Card Payment | ✔ Test for known vulnerabilities and configuration issues on Web Server and Web Application | YES |
| Risky Functionality - Card Payment | ✔ Test for default or guessable password | YES |
| Risky Functionality - Card Payment | ✔ Test for non-production data in live environment, and vice-versa | YES |
| Risky Functionality - Card Payment | ✔ Test for Injection vulnerabilities | YES |
| Risky Functionality - Card Payment | ✔ Test for Buffer Overflows | YES |
| Risky Functionality - Card Payment | ✔ Test for Insecure Cryptographic Storage | YES |
| Risky Functionality - Card Payment | ✔ Test for Insufficient Transport Layer Protection | YES |
| Risky Functionality - Card Payment | ✔ Test for Improper Error Handling | YES |
| Risky Functionality - Card Payment | ✔ Test for all vulnerabilities with a CVSS v2 score > 4.0 | YES |
| Risky Functionality - Card Payment | ✔ Test for Authentication and Authorization issues | YES |
| Risky Functionality - Card Payment | ✔ Test for CSRF | YES |
| HTML 5 | ✔ Test Web Messaging | YES |
| HTML 6 | ✔ Test for Web Storage SQL injection | YES |
| HTML 7 | ✔ Check CORS implementation | YES |
| HTML 8 | ✔ Check Offline Web Application | YES |
Note that we start the search in tbody, to prevent filtering the table headers.