Questions tagged [owasp]

The Open Web Application Security Project (OWASP) is an organization that wants to inform people about application security.

The Open Web Application Security Project (OWASP) is an organization that wants to inform people about application security.

They provide various examples of attack vectors, and how to protect your applications against them, including examples in multiple programming languages.

OWASP provide a long list of cheat sheets to help address security issues with common application design.

OWASP Top Ten Project

The OWASP Top Ten flagship project provides a list of critical application security vulnerabilities. These vulnerabilities are selected based on a combination of frequency, exploitability and severity. The list acts as a starting point for web applications to harden themselves against attack.

1114 questions
-2
votes
2 answers

SQL Injection clarification

There is a query like: select * from tablename where username='value1' and password='value2'; If I set to the fields the following: username ='admin' and password ='admin'; Then I sign in into the website as administrator. Now, If I wanted to…
thuk
  • 263
  • 3
  • 7
  • 21
-3
votes
1 answer

How do you make owasp zap crawl subdomains?

In the spider window it says they are out of scope.
-3
votes
1 answer

Can I do sql injection on this website

I am trying to fetch bulk data from a website database but could not succeed. Can somebody suggest if SQL injection is possible and how to do in this case.
RanchiRhino
  • 786
  • 4
  • 21
-5
votes
1 answer

How to configure the user_token of Damn Vulnerable Web Application within CSRF field while Script based authentication using ZAP?

I had been following the documentation of Script Based Authentication for Damn Vulnerable Web Application using ZAP. I have navigated to http://localhost/dvwa/login.php through Manual Explore which opens up the DVWA application on my localhost as…
undetected Selenium
  • 183,867
  • 41
  • 278
  • 352
1 2 3
74
75