This shows you the differences between two versions of the page.
cns:extra:web-app-security-02 [2017/01/28 16:42] razvan.deaconescu created |
cns:extra:web-app-security-02 [2022/03/14 12:42] (current) razvan.deaconescu [Resources] |
||
---|---|---|---|
Line 5: | Line 5: | ||
* [[https://www.owasp.org/index.php/OWASP_Testing_Guide_v4_Table_of_Contents|OWASP Testing Guide v4]], [[https://www.owasp.org/index.php/Testing_for_Input_Validation|Section 4.8 Input validation testing]] | * [[https://www.owasp.org/index.php/OWASP_Testing_Guide_v4_Table_of_Contents|OWASP Testing Guide v4]], [[https://www.owasp.org/index.php/Testing_for_Input_Validation|Section 4.8 Input validation testing]] | ||
* [[https://www.owasp.org/index.php/Testing_for_Command_Injection_(OTG-INPVAL-013)|Command injection]] | * [[https://www.owasp.org/index.php/Testing_for_Command_Injection_(OTG-INPVAL-013)|Command injection]] | ||
+ | * [[https://www.pcwdld.com/sql-cheat-sheet|SQL Cheat Sheet - Oracle SQL & PostgreSQL]] | ||
* [[https://www.owasp.org/index.php/Testing_for_SQL_Injection_(OTG-INPVAL-005)|SQL injection]] | * [[https://www.owasp.org/index.php/Testing_for_SQL_Injection_(OTG-INPVAL-005)|SQL injection]] | ||
- | * [[http://ferruh.mavituna.com/sql-injection-cheatsheet-oku/|SQL Injection Cheat Sheet]] | + | * [[https://www.netsparker.com/blog/web-security/sql-injection-cheat-sheet/|SQL Injection Cheat Sheet]] |
* [[https://www.owasp.org/index.php/Testing_for_Reflected_Cross_site_scripting_(OTG-INPVAL-001)|Reflected XSS]] versus [[https://www.owasp.org/index.php/Testing_for_Stored_Cross_site_scripting_(OTG-INPVAL-002)|Stored XSS]] | * [[https://www.owasp.org/index.php/Testing_for_Reflected_Cross_site_scripting_(OTG-INPVAL-001)|Reflected XSS]] versus [[https://www.owasp.org/index.php/Testing_for_Stored_Cross_site_scripting_(OTG-INPVAL-002)|Stored XSS]] | ||
* [[https://www.owasp.org/index.php/Testing_for_DOM-based_Cross_site_scripting_(OTG-CLIENT-001)|DOM-based XSS]] | * [[https://www.owasp.org/index.php/Testing_for_DOM-based_Cross_site_scripting_(OTG-CLIENT-001)|DOM-based XSS]] | ||
* [[http://en.wikipedia.org/wiki/Same-origin_policy|Same-origin policy]] | * [[http://en.wikipedia.org/wiki/Same-origin_policy|Same-origin policy]] | ||
+ | * [[https://comparite.ch/burpcs|Burp Suite Cheat Sheet]] | ||
===== Supporting files ===== | ===== Supporting files ===== |