A modern web application features a large number of components that can have vulnerabilities and thus there can also be quite many attack vectors for the attacker.
The OWASP Top Ten serve as a guideline for individual tests. Our testing follows the complete OWASP Web Security Testing Guide (WSTG) with 12 categories and over 90 individual tests – going well beyond the Top Ten.
The following points can be enumerated as a rough pattern:
- Susceptibility to SQL injection
- Susceptibility to XSS / Cross site scripting
- Search for files and folders with contents not intended for the public
- Search for errors in the application, which allow output of non-public data or execution of programs on the server
- Search for misconfiguration (directory listing, SSL configuration)
- Client data safety (logins, sessions, authorization matrix, encryption, etc.)
Our methodology is based on the OWASP Web Security Testing Guide (WSTG). It covers 12 test categories with over 90 individual tests, providing comprehensive coverage of web application security.
In case you have questions or would like to receive an offer for a security check of your web application, please contact us.
Related Services: Penetration Tests | Red Team | Vulnerability Scan