Security Testing

  1. Web Application Security Testing
    1. OWASP Top 10 Vulnerabilities
      1. Injection Vulnerabilities
        1. SQL Injection
          1. Union-Based Injection
            1. Boolean-Based Blind Injection
              1. Time-Based Blind Injection
                1. Error-Based Injection
                2. NoSQL Injection
                  1. LDAP Injection
                    1. Command Injection
                      1. Code Injection
                      2. Broken Authentication
                        1. Weak Password Policies
                          1. Session Management Flaws
                            1. Credential Stuffing
                              1. Brute Force Attacks
                                1. Multi-Factor Authentication Bypass
                                2. Sensitive Data Exposure
                                  1. Insecure Data Transmission
                                    1. Inadequate Encryption
                                      1. Insecure Data Storage
                                        1. Information Leakage
                                        2. XML External Entities
                                          1. XXE File Disclosure
                                            1. XXE SSRF
                                              1. XXE Denial of Service
                                              2. Broken Access Control
                                                1. Insecure Direct Object References
                                                  1. Missing Function Level Access Control
                                                    1. Privilege Escalation
                                                      1. Path Traversal
                                                      2. Security Misconfiguration
                                                        1. Default Configurations
                                                          1. Unnecessary Services
                                                            1. Verbose Error Messages
                                                              1. Missing Security Headers
                                                              2. Cross-Site Scripting
                                                                1. Stored XSS
                                                                  1. Reflected XSS
                                                                    1. DOM-Based XSS
                                                                      1. Blind XSS
                                                                      2. Insecure Deserialization
                                                                        1. Object Injection
                                                                          1. Remote Code Execution
                                                                            1. Privilege Escalation
                                                                            2. Using Components with Known Vulnerabilities
                                                                              1. Outdated Libraries
                                                                                1. Vulnerable Dependencies
                                                                                  1. Supply Chain Attacks
                                                                                  2. Insufficient Logging and Monitoring
                                                                                    1. Missing Audit Trails
                                                                                      1. Inadequate Log Analysis
                                                                                        1. Delayed Incident Detection
                                                                                      2. Web Application Components Testing
                                                                                        1. API Security Testing
                                                                                          1. REST API Vulnerabilities
                                                                                            1. SOAP API Security Issues
                                                                                              1. GraphQL Security Testing
                                                                                                1. API Authentication Testing
                                                                                                  1. Rate Limiting Verification
                                                                                                  2. Session Management Testing
                                                                                                    1. Session Token Analysis
                                                                                                      1. Session Fixation Testing
                                                                                                        1. Session Timeout Verification
                                                                                                          1. Cross-Site Request Forgery
                                                                                                          2. Business Logic Testing
                                                                                                            1. Workflow Bypass
                                                                                                              1. Race Conditions
                                                                                                                1. Price Manipulation
                                                                                                                  1. Privilege Escalation
                                                                                                                  2. File Upload Security
                                                                                                                    1. Malicious File Upload
                                                                                                                      1. File Type Validation Bypass
                                                                                                                        1. Path Traversal via Upload
                                                                                                                          1. Server-Side Execution
                                                                                                                          2. Client-Side Security
                                                                                                                            1. DOM Manipulation
                                                                                                                              1. Client-Side Validation Bypass
                                                                                                                                1. Browser Security Features
                                                                                                                              2. Testing Methodologies
                                                                                                                                1. Manual Testing Approaches
                                                                                                                                  1. Exploratory Testing
                                                                                                                                    1. Scenario-Based Testing
                                                                                                                                      1. Boundary Value Testing
                                                                                                                                      2. Automated Testing Tools
                                                                                                                                        1. Web Application Scanners
                                                                                                                                          1. Proxy-Based Testing
                                                                                                                                            1. Custom Script Development
                                                                                                                                            2. Hybrid Testing Strategies
                                                                                                                                              1. Tool-Assisted Manual Testing
                                                                                                                                                1. Automated Verification
                                                                                                                                                  1. Continuous Testing Integration

                                                                                                                                              Previous

                                                                                                                                              4. Penetration Testing Execution Standard

                                                                                                                                              Go to top

                                                                                                                                              Next

                                                                                                                                              6. Mobile Application Security Testing