├── OWASP_Web_Application_Testing_Cheat_Sheet.xml
├── README.md
└── convert-cheat-sheet-to-dradis-pro.rb


/OWASP_Web_Application_Testing_Cheat_Sheet.xml:
--------------------------------------------------------------------------------
  1 | <methodology>
  2 | <name>OWASP Web Application Testing Cheat Sheet</name>
  3 | <sections>
  4 | <section>
  5 | <name> Information Gathering </name>
  6 | <tasks>
  7 | <task> Manually explore the site</task>
  8 | <task> Spider</task>
  9 | <task> Check for files that expose content</task>
 10 | <task> Check the caches of major search engines for publicly accessible sites</task>
 11 | <task> Check for differences in content based on User Agent </task>
 12 | <task> Perform Web Application Fingerprinting</task>
 13 | <task> Identify technologies used</task>
 14 | <task> Identify user roles</task>
 15 | <task> Identify application entry points</task>
 16 | <task> Identify client-side code</task>
 17 | <task> Identify multiple versions</task>
 18 | <task> Identify co-hosted and related applications</task>
 19 | <task> Identify all hostnames and ports</task>
 20 | <task> Identify third-party hosted content</task>
 21 | </tasks>
 22 | </section>
 23 | <section>
 24 | <name> Configuration Management </name>
 25 | <tasks>
 26 | <task> Check for commonly used application and administrative URLs</task>
 27 | <task> Check for old</task>
 28 | <task> Check HTTP methods supported and Cross Site Tracing </task>
 29 | <task> Test file extensions handling</task>
 30 | <task> Test for security HTTP headers </task>
 31 | <task> Test for policies </task>
 32 | <task> Test for non-production data in live environment</task>
 33 | <task> Check for sensitive data in client-side code </task>
 34 | </tasks>
 35 | </section>
 36 | <section>
 37 | <name> Secure Transmission </name>
 38 | <tasks>
 39 | <task> Check SSL Version</task>
 40 | <task> Check for Digital Certificate Validity </task>
 41 | <task> Check credentials only delivered over HTTPS</task>
 42 | <task> Check session tokens only delivered over HTTPS</task>
 43 | <task> Check if HTTP Strict Transport Security </task>
 44 | </tasks>
 45 | </section>
 46 | <section>
 47 | <name> Authentication </name>
 48 | <tasks>
 49 | <task> Test for user enumeration</task>
 50 | <task> Test for authentication bypass</task>
 51 | <task> Test for bruteforce protection</task>
 52 | <task> Test password quality rules</task>
 53 | <task> Test remember me functionality</task>
 54 | <task> Test for autocomplete on password forms</task>
 55 | <task> Test password reset and</task>
 56 | <task> Test password change process</task>
 57 | <task> Test CAPTCHA</task>
 58 | <task> Test multi factor authentication</task>
 59 | <task> Test for logout functionality presence</task>
 60 | <task> Test for cache management on HTTP </task>
 61 | <task> Test for default logins</task>
 62 | <task> Test for user-accessible authentication history</task>
 63 | <task> Test for out-of channel notification of account lockouts and successful password changes</task>
 64 | <task> Test for consistent authentication across applications with shared authentication schema </task>
 65 | </tasks>
 66 | </section>
 67 | <section>
 68 | <name> Session Management </name>
 69 | <tasks>
 70 | <task> Establish how session management is handled in the application </task>
 71 | <task> Check session tokens for cookie flags </task>
 72 | <task> Check session cookie scope </task>
 73 | <task> Check session cookie duration </task>
 74 | <task> Check session termination after a maximum lifetime</task>
 75 | <task> Check session termination after relative timeout</task>
 76 | <task> Check session termination after logout</task>
 77 | <task> Test to see if users can have multiple simultaneous sessions</task>
 78 | <task> Test session cookies for randomness</task>
 79 | <task> Confirm that new session tokens are issued on login</task>
 80 | <task> Test for consistent session management across applications with shared session management</task>
 81 | <task> Test for session puzzling</task>
 82 | <task> Test for CSRF and clickjacking</task>
 83 | </tasks>
 84 | </section>
 85 | <section>
 86 | <name> Authorization </name>
 87 | <tasks>
 88 | <task> Test for path traversal</task>
 89 | <task> Test for bypassing authorization schema</task>
 90 | <task> Test for vertical Access control problems </task>
 91 | <task> Test for horizontal Access control problems </task>
 92 | <task> Test for missing authorization</task>
 93 | </tasks>
 94 | </section>
 95 | <section>
 96 | <name> Data Validation </name>
 97 | <tasks>
 98 | <task> Test for Reflected Cross Site Scripting</task>
 99 | <task> Test for Stored Cross Site Scripting</task>
100 | <task> Test for DOM based Cross Site Scripting</task>
101 | <task> Test for Cross Site Flashing</task>
102 | <task> Test for HTML Injection</task>
103 | <task> Test for SQL Injection</task>
104 | <task> Test for LDAP Injection</task>
105 | <task> Test for ORM Injection</task>
106 | <task> Test for XML Injection</task>
107 | <task> Test for XXE Injection</task>
108 | <task> Test for SSI Injection</task>
109 | <task> Test for XPath Injection</task>
110 | <task> Test for XQuery Injection</task>
111 | <task> Test for IMAP</task>
112 | <task> Test for Code Injection</task>
113 | <task> Test for Command Injection</task>
114 | <task> Test for Overflow </task>
115 | <task> Test for Format String</task>
116 | <task> Test for incubated vulnerabilities</task>
117 | <task> Test for HTTP Splitting</task>
118 | <task> Test for HTTP Verb Tampering</task>
119 | <task> Test for Open Redirection</task>
120 | <task> Test for Local File Inclusion</task>
121 | <task> Test for Remote File Inclusion</task>
122 | <task> Compare client-side and server-side validation rules</task>
123 | <task> Test for NoSQL injection</task>
124 | <task> Test for HTTP parameter pollution</task>
125 | <task> Test for auto-binding</task>
126 | </tasks>
127 | </section>
128 | <section>
129 | <name> Denial of Service </name>
130 | <tasks>
131 | <task> Test for anti-automation</task>
132 | <task> Test for account lockout</task>
133 | <task> Test for HTTP protocol DoS</task>
134 | </tasks>
135 | </section>
136 | <section>
137 | <name> Business Logic </name>
138 | <tasks>
139 | <task> Test for feature misuse</task>
140 | <task> Test for lack of non-repudiation</task>
141 | <task> Test for trust relationships</task>
142 | <task> Test for integrity of data</task>
143 | <task> Test segregation of duties</task>
144 | </tasks>
145 | </section>
146 | <section>
147 | <name> Cryptography </name>
148 | <tasks>
149 | <task> Check if data which should be encrypted is not</task>
150 | <task> Check for wrong algorithms usage depending on context</task>
151 | <task> Check for weak algorithms usage</task>
152 | <task> Check for proper use of salting</task>
153 | <task> Check for randomness functions</task>
154 | </tasks>
155 | </section>
156 | <section>
157 | <name> Risky Functionality - File Uploads </name>
158 | <tasks>
159 | <task> Test that acceptable file types are whitelisted</task>
160 | <task> Test that file size limits</task>
161 | <task> Test that file contents match the defined file type</task>
162 | <task> Test that all file uploads have Anti-Virus scanning in-place</task>
163 | <task> Test that unsafe filenames are sanitised</task>
164 | <task> Test that uploaded files are not directly accessible within the web root</task>
165 | <task> Test that uploaded files are not served on the same hostname</task>
166 | <task> Test that files and other media are integrated with the authentication and authorisation schemas</task>
167 | </tasks>
168 | </section>
169 | <section>
170 | <name> Risky Functionality - Card Payment </name>
171 | <tasks>
172 | <task> Test whether card number are stored</task>
173 | <task> TBC</task>
174 | </tasks>
175 | </section>
176 | <section>
177 | <name> HTML 5</name>
178 | <tasks>
179 | <task> Test Web Messaging</task>
180 | <task> Test for Web Storage SQL injection</task>
181 | </tasks>
182 | </section>
183 | </sections>
184 | </methodology>
185 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | OWASP_Web_App_Testing_Cheatsheet_Converter
2 | ==========================================
3 | 
4 | OWASP Web Application Testing Cheat Sheet converted to tool formats


--------------------------------------------------------------------------------
/convert-cheat-sheet-to-dradis-pro.rb:
--------------------------------------------------------------------------------
 1 | #!/usr/bin/env ruby
 2 | 
 3 | unless ARGV.length > 0
 4 |   puts "The syntax is convert-cheat-sheet-to-dradis-pro.rb <input_file_name>"
 5 |   exit
 6 | end
 7 | 
 8 | input_file = File.open(ARGV[0],'r+').readlines
 9 | 
10 | output_file = File.new('OWASP_Web_Application_Testing_Cheat_Sheet.xml','w+')
11 | 
12 | 
13 | output_file.puts '<methodology>'
14 | output_file.puts '<name>OWASP Web Application Testing Cheat Sheet</name>'
15 | output_file.puts '<sections>'
16 | 
17 | first_section = true
18 | input_file.each do |line|
19 |   if line =~ /^==/
20 |     title = line.scan(/(==)([a-zA-Z0-9\-\_ ]+)(==)/)[0][1]
21 |     if first_section
22 |       first_section = false
23 |       output_file.puts "<section>\n<name>#{title}</name>\n<tasks>"
24 |     else
25 |       output_file.puts "</tasks>\n</section>\n<section>\n<name>#{title}</name>\n<tasks>"
26 |     end 
27 |   end
28 | 
29 |   if line =~ /^\*/
30 |     check = line.scan(/(\*)([a-zA-Z0-9\-\_ ]+)/)[0][1]
31 |     output_file.puts "<task>#{check}</task>"
32 |   end
33 | 
34 | end
35 | 
36 | output_file.puts "</tasks>"
37 | output_file.puts "</section>"
38 | output_file.puts "</sections>"
39 | output_file.puts "</methodology>"
40 | 


--------------------------------------------------------------------------------