web-security-testing

原文涵盖的主题

• Web Security Testing Workflow
• Overview
• When to Use This Workflow
• Workflow Phases
• Phase 1: Reconnaissance
• Skills to Invoke
• Actions
• Copy-Paste Prompts

Specialized workflow for testing web applications against OWASP Top 10 vulnerabilities including injection attacks, XSS, broken authentication, and access control issues. Use this workflow when: Testing web application security Performing OWASP Top 10 assessment Conducting penetration tests Validating security controls Bug bounty hunting scanning-tools - Security scanning top-web-vulnerabilities - OWASP knowledge 1. Map application surface 2. Identify technologies 3. Discover endpoints 4. Find subdomains 5. Document findings sql-injection-testing - SQL injection sqlmap-database-pentesting - SQLMap 1. Test SQL injection 2. Test NoSQL injection 3. Test command injection 4. Test LDAP injection 5. Document vulnerabilities xss-html-injection - XSS testing html-injection-testing - HTML injection 1. Test reflected XSS 2. Test stored XSS 3. Test DOM-based XSS 4. Test XSS filters 5. Document findings broken-authentication - Authentication testing 1. Test credential stuffing 2. Test brute force protection 3. Test session management 4. Test password policies 5. Test MFA implementation idor-testing - IDOR testing file-path-traversal - Path traversal 1. Test vertical privilege escalation 2. Tes

这里只展示节选，请以完整原文和当前要求为准。