Skip to content

Penetration tests guide based on OWASP including test cases, resources and examples.

License

Notifications You must be signed in to change notification settings

zdresearch/pentest-guide

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Penetration Test Guide based on the OWASP + Extra

This guid is for the penetration testers seeking for the appropriate test cases required during a penetration test project. I rearranged the OWASP Testing Guide v4 from my point of view including 9 Test Classes and each class has several Test Cases to conduct against the target. Each Test Case covers several OWASP tests which also is useful for the report document. I've also added 15 extra Tests Cases marked by the EXTRA-TEST. I hope it will be useful in both penetration test projects and bug-bounty.

TODO:

  1. Add resources for each test

Information Gathering

    • Fingerprint Technologies
    • Fingerprint Web Server (OTG-INFO-002)
    • Enumerate Applications on Webserver (OTG-INFO-004)
    • Fingerprint Web Application Framework (OTG-INFO-008)
    • Fingerprint Web Application (OTG-INFO-009)
    • Information Leakage
    • Conduct Search Engine Discovery and Reconnaissance for Information Leakage (OTG-INFO-001)
    • Review Webserver Metafiles for Information Leakage (OTG-INFO-003)
    • Review Webpage Comments and Metadata for Information Leakage (OTG-INFO-005)
    • Analysis of Error Codes (OTG-ERR-001)
    • Analysis of Stack Traces (OTG-ERR-002)
    • Conduct a Fuzzing for Hidden and Sensitive Files or Directories (EXTRA-TEST-014)
    • Directory Indexing
    • Search for Directory Indexing (EXTRA-TEST-001)
    • Storing Sensitive Information on Client Side
    • Test Local Storage (OTG-CLIENT-012)

Configuration and Deployment Management

    • Enumerate Infrastructure and Application Admin Interfaces
    • Enumerate Infrastructure and Application Admin Interfaces (OTG-CONFIG-005)
    • Test Network/Infrastructure Configuration (OTG-CONFIG-001)
    • Hidden Resources Discovery
    • Review Old, Backup and Unreferenced Files for Sensitive Information (OTG-CONFIG-004)
    • HTTP Security Headers
    • Testing for Lack of HTTP Security Headers (EXTRA-TEST-002)

Identity Management and Authentication

Authorization and Boundary Test

Cookie and Session Management

    • Secure Session Management
    • Testing for Bypassing Session Management Schema (OTG-SESS-001)
    • Testing for Session Fixation (OTG-SESS-003)
    • Testing for Exposed Session Variables (OTG-SESS-004)
    • Testing for Logout functionality (OTG-SESS-006)
    • Test Session Timeout (OTG-SESS-007)
    • Testing for Session puzzling (OTG-SESS-008)

Accessibility

    • Denial of Service
    • Test for Denial of Service (EXTRA-TEST-008)

Input/Output Validation

Testing for weak Cryptography

    • Testing for Weak SSL/TLS Ciphers, Insufficient Transport Layer Protection
    • Testing for Weak SSL/TLS Ciphers, Insufficient Transport Layer Protection (OTG-CRYPST-001)
    • Testing for Sensitive Information Sent via Unencrypted Channels
    • Testing for Sensitive Information Sent via Unencrypted Channels (OTG-CRYPST-003)
    • Testing for Padding Oracle (OTG-CRYPST-002)

Workflow/Dataflow Tests

    • Test Business Logic Data Validation (OTG-BUSLOGIC-001)
    • Test Ability to Forge Requests (OTG-BUSLOGIC-002)
    • Test Integrity Checks (OTG-BUSLOGIC-003)
    • Test for Process Timing (OTG-BUSLOGIC-004)
    • Test Number of Times a Function Can be Used Limits (OTG-BUSLOGIC-005)
    • Testing for the Circumvention of Work Flows (OTG-BUSLOGIC-006)
    • Test Defenses Against Application Mis-use (OTG-BUSLOGIC-007)

About

Penetration tests guide based on OWASP including test cases, resources and examples.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published