{
"metadata": { "title": "Website Testing", "release_date": "2021-05-31T00:00:00+00:00", "description": "Bugcrowd web methodology testing", "vrt_version": "10.0.1" }, "content": { "steps": [ { "key": "information", "title": "Information gathering", "description": "", "items": [ { "key": "search_engine_discovery_and_reconnaissance", "title": "Conduct Search Engine Discovery and Reconnaissance for Information Leakage", "description": "OTG-INFO-001, WAHHM - Recon and Analysis", "vrt_category": "sensitive_data_exposure" }, { "key": "fingerprint", "title": "Fingerprint Web Server", "description": "OTG-INFO-002, WAHHM - Recon and Analysis", "vrt_category": "server_security_misconfiguration" }, { "key": "webserver_metafiles", "title": "Review Webserver Metafiles for Information Leakage", "description": "OTG-INFO-003, WAHHM - Recon and Analysis" }, { "key": "enumerate_applications", "title": "Enumerate Applications on Webserver", "description": "if in scope OTG-INFO-004, WAHHM - Recon and Analysis" }, { "key": "webpage_comments_and_metadata", "title": "Review Webpage Comments and Metadata for Information Leakage", "description": "OTG-INFO-005, WAHHM - Recon and Analysis", "vrt_category": "sensitive_data_exposure" }, { "key": "application_entry_points", "title": "Identify application entry points", "description": "OTG-INFO-006, WAHHM - Recon and Analysis" }, { "key": "execution_paths", "title": "Map execution paths through application", "description": "OTG-INFO-007, WAHHM - Recon and Analysis" }, { "key": "fingerprint_webapp_framework", "title": "Fingerprint Web Application Framework", "description": "OTG-INFO-008, WAHHM - Recon and Analysis" }, { "key": "fingerprint_webapp", "title": "Fingerprint Web Application", "description": "OTG-INFO-009, WAHHM - Recon and Analysis" }, { "key": "application_architecture", "title": "Map Application Architecture", "description": "OTG-INFO-010, WAHHM - Recon and Analysis" } ] }, { "key": "config_and_deploy_management", "title": "Configuration and Deploy Management Testing", "description": "", "items": [ { "key": "network_and_infrastructure", "title": "Test Network/Infrastructure Configuration", "description": "OTG-CONFIG-001, WAHHM - Recon and Analysis, Assess Application Hosting", "vrt_category": "server_security_misconfiguration" }, { "key": "application_platform", "title": "Test Application Platform Configuration", "description": "OTG-CONFIG-002, WAHHM - Recon and Analysis", "vrt_category": "server_security_misconfiguration" }, { "key": "file_extensions_handling", "title": "Test File Extensions Handling for Sensitive Information", "description": "OTG-CONFIG-003, WAHHM - Recon and Analysis", "vrt_category": "sensitive_data_exposure" }, { "key": "backup_and_unreferenced_files", "title": "Backup and Unreferenced Files for Sensitive Information", "description": "OTG-CONFIG-004, WAHHM - Recon and Analysis", "vrt_category": "sensitive_data_exposure" }, { "key": "admin_interfaces", "title": "Enumerate Infrastructure and Application Admin Interfaces", "description": "OTG-CONFIG-005, WAHHM - Recon and Analysis" }, { "key": "http_methods", "title": "Test HTTP Methods", "description": "OTG-CONFIG-006, WAHHM - Test Handling of Access", "vrt_category": "server_security_misconfiguration" }, { "key": "http_transport_security", "title": "Test HTTP Strict Transport Security", "description": "OTG-CONFIG-007, WAHHM - Test Handling of Access", "vrt_category": "server_security_misconfiguration" }, { "key": "ria_cross_domain_policy", "title": "Test RIA cross domain policy", "description": "OTG-CONFIG-008, WAHHM - Test Handling of Access", "vrt_category": "server_security_misconfiguration" } ] }, { "key": "identity_management", "title": "Identity Management Testing", "description": "", "items": [ { "key": "role_definition", "title": "Test Role Definitions", "description": "OTG-IDENT-001, WAHHM - Test Handling of Access", "vrt_category": "broken_access_control" }, { "key": "user_registration", "title": "Test User Registration Process", "description": "OTG-IDENT-002, WAHHM - Test Handling of Access", "vrt_category": "server_security_misconfiguration" }, { "key": "account_provisioning", "title": "Test Account Provisioning Process", "description": "OTG-IDENT-003, WAHHM - Test Handling of Access" }, { "key": "guessable_user_accounts", "title": "Testing for Account Enumeration and Guessable User Account", "description": "OTG-IDENT-004, WAHHM - Test Handling of Access", "vrt_category": "server_security_misconfiguration" }, { "key": "username_policy", "title": "Testing for Weak or unenforced username policy", "description": "OTG-IDENT-005, WAHHM - Test Handling of Access", "vrt_category": "server_security_misconfiguration" }, { "key": "guest_accounts_permission", "title": "Test Permissions of Guest/Training Accounts", "description": "OTG-IDENT-006, WAHHM - Test Handling of Access", "vrt_category": "server_security_misconfiguration" }, { "key": "account_suspension_resumption", "title": "Test Account Suspension/Resumption Process", "description": "OTG-IDENT-007, WAHHM - Test Handling of Access", "vrt_category": "server_security_misconfiguration" } ] }, { "key": "authentication", "title": "Authentication Testing", "description": "", "items": [ { "key": "encrypted_credentials", "title": "Testing for Credentials Transported over an Encrypted Channel", "description": "OTG-AUTHN-001, WAHHM - Miscellaneous Tests", "vrt_category": "broken_authentication_and_session_management" }, { "key": "default_credentials", "title": "Testing for default credentials", "description": "OTG-AUTHN-002, WAHHM - Test Handling of Access", "vrt_category": "server_security_misconfiguration" }, { "key": "lock_out_mechanism", "title": "Testing for Weak lock out mechanism", "description": "OTG-AUTHN-003, WAHHM - Test Handling of Access", "vrt_category": "server_security_misconfiguration" }, { "key": "bypass_schema", "title": "Testing for bypassing authentication schema", "description": "OTG-AUTHN-004, WAHHM - Test Handling of Access", "vrt_category": "broken_authentication_and_session_management" }, { "key": "remember_password", "title": "Test remember password functionality", "description": "OTG-AUTHN-005, WAHHM - Test Handling of Access", "vrt_category": "broken_authentication_and_session_management" }, { "key": "browser_cache", "title": "Testing for Browser cache weakness", "description": "OTG-AUTHN-006, WAHHM - Miscellaneous Tests", "vrt_category": "server_security_misconfiguration" }, { "key": "password_policy", "title": "Testing for Weak password policy", "description": "OTG-AUTHN-007, WAHHM - Test Handling of Access", "vrt_category": "insufficient_security_configurability" }, { "key": "security_question", "title": "Testing for Weak security question/answer", "description": "OTG-AUTHN-008, WAHHM - Test Handling of Access", "vrt_category": "broken_authentication_and_session_management" }, { "key": "change_password", "title": "Testing for weak password change or reset functionalities", "description": "OTG-AUTHN-009, WAHHM - Test Handling of Access", "vrt_category": "broken_authentication_and_session_management" }, { "key": "alternative_channel", "title": "Testing for Weaker authentication in alternative channel", "description": "OTG-AUTHN-010, WAHHM - Test Handling of Access" } ] }, { "key": "authorization", "title": "Authorization Testing", "description": "", "items": [ { "key": "directory_traversal_and_file_include", "title": "Testing Directory traversal/file include", "description": "OTG-AUTHZ-001, WAHHM - Test Handling of Input", "vrt_category": "server_side_injection" }, { "key": "bypass_schema", "title": "Testing for bypassing authorization schema", "description": "OTG-AUTHZ-002, WAHHM - Test Handling of Access", "vrt_category": "broken_access_control" }, { "key": "privilege_escalation", "title": "Testing for Privilege Escalation", "description": "OTG-AUTHZ-003, WAHHM - Test Handling of Access", "vrt_category": "broken_authentication_and_session_management" }, { "key": "direct_object_reference", "title": "Testing for Insecure Direct Object References", "description": "OTG-AUTHZ-004, WAHHM - Test Handling of Access", "vrt_category": "broken_access_control" } ] }, { "key": "session_management", "title": "Session Management Testing", "description": "", "items": [ { "key": "bypass_schema", "title": "Testing for Bypassing Session Management Schema", "description": "OTG-SESS-001, WAHHM - Test Handling of Access", "vrt_category": "broken_authentication_and_session_management" }, { "key": "cookies", "title": "Testing for Cookies attributes", "description": "OTG-SESS-002, WAHHM - Test Handling of Access", "vrt_category": "server_security_misconfiguration" }, { "key": "fixation", "title": "Testing for Session Fixation", "description": "OTG-SESS-003, WAHHM - Test Handling of Access", "vrt_category": "broken_authentication_and_session_management" }, { "key": "exposed_variables", "title": "Testing for Exposed Session Variables", "description": "OTG-SESS-004, WAHHM - Test Handling of Access", "vrt_category": "broken_authentication_and_session_management" }, { "key": "csrf", "title": "Testing for Cross Site Request Forgery", "description": "OTG-SESS-005, WAHHM - Test Handling of Access", "vrt_category": "cross_site_request_forgery_csrf" }, { "key": "logout", "title": "Testing for logout functionality", "description": "OTG-SESS-006, WAHHM - Test Handling of Access", "vrt_category": "broken_authentication_and_session_management" }, { "key": "timeout", "title": "Test Session Timeout", "description": "OTG-SESS-007, WAHHM - Test Handling of Access", "vrt_category": "broken_authentication_and_session_management" }, { "key": "puzzling", "title": "Testing for Session puzzling", "description": "OTG-SESS-008, WAHHM - Test Handling of Access", "vrt_category": "broken_authentication_and_session_management" } ] }, { "key": "data_validation", "title": "Data Validation Testing", "description": "", "items": [ { "key": "reflected_xss", "title": "Testing for Reflected Cross Site Scripting", "description": "OTG-INPVAL-001, WAHHM - Test Handling of Input" }, { "key": "stored_xss", "title": "Testing for Stored Cross Site Scripting", "description": "OTG-INPVAL-002, WAHHM - Test Handling of Input", "vrt_category": "cross_site_scripting_xss" }, { "key": "http_verb_tampering", "title": "Testing for HTTP Verb Tampering", "description": "OTG-INPVAL-003, WAHHM - Test Handling of Input", "vrt_category": "server_security_misconfiguration" }, { "key": "http_param_pollution", "title": "Testing for HTTP Parameter pollution", "description": "OTG-INPVAL-004, WAHHM - Test Handling of Input", "vrt_category": "server_side_injection" }, { "key": "sql_injection", "title": "Testing for SQL Injection", "description": "OTG-INPVAL-005, WAHHM - Test Handling of Input", "vrt_category": "server_side_injection" }, { "key": "oracle", "title": "Oracle Testing", "description": "" }, { "key": "mysql", "title": "MySQL Testing", "description": "" }, { "key": "sql_server", "title": "SQL Server Testing", "description": "" }, { "key": "postgre_sql", "title": "Testing PostgreSQL", "description": "" }, { "key": "ms_access", "title": "MS Access Testing", "description": "" }, { "key": "nosql_injection", "title": "Testing for NoSQL injection", "description": "" }, { "key": "ldap_injection", "title": "Testing for LDAP Injection", "description": "OTG-INPVAL-006, WAHHM - Test Handling of Input", "vrt_category": "server_side_injection" }, { "key": "orm_injection", "title": "Testing for ORM Injection", "description": "OTG-INPVAL-007, WAHHM - Test Handling of Input", "vrt_category": "server_side_injection" }, { "key": "xml_injection", "title": "Testing for XML Injection", "description": "OTG-INPVAL-008, WAHHM - Test Handling of Input", "vrt_category": "server_side_injection" }, { "key": "ssi_injection", "title": "Testing for SSI Injection", "description": "OTG-INPVAL-009, WAHHM - Test Handling of Input", "vrt_category": "server_side_injection" }, { "key": "xpath_injection", "title": "Testing for XPath Injection", "description": "OTG-INPVAL-010, WAHHM - Test Handling of Input", "vrt_category": "server_side_injection" }, { "key": "imap_smtp_injection", "title": "IMAP/SMTP Injection", "description": "OTG-INPVAL-011, WAHHM - Test Handling of Input", "vrt_category": "server_side_injection" }, { "key": "code_injection", "title": "Testing for Code Injection", "description": "OTG-INPVAL-012, WAHHM - Test Handling of Input", "vrt_category": "server_side_injection" }, { "key": "local_file_inclusion", "title": "Testing for Local File Inclusion", "description": "" }, { "key": "remote_file_inclusion", "title": "Testing for Remote File Inclusion", "description": "" }, { "key": "command_injection", "title": "Testing for Command Injection", "description": "OTG-INPVAL-013, WAHHM - Test Handling of Input", "vrt_category": "server_side_injection" }, { "key": "buffer_overflow", "title": "Testing for Buffer overflow", "description": "OTG-INPVAL-014, WAHHM - Test Handling of Input", "vrt_category": "server_side_injection" }, { "key": "heap_overflow", "title": "Testing for Heap overflow", "description": "" }, { "key": "stack_overflow", "title": "Testing for Stack overflow", "description": "" }, { "key": "format_string", "title": "Testing for Format string", "description": "" }, { "key": "incubated_vulnerabilities", "title": "Testing for incubated vulnerabilities", "description": "OTG-INPVAL-015, WAHHM - Test Handling of Input", "vrt_category": "server_security_misconfiguration" }, { "key": "http_splitting_and_smuggling", "title": "Testing for HTTP Splitting/Smuggling", "description": "OTG-INPVAL-016, WAHHM - Test Handling of Input", "vrt_category": "server_side_injection" } ] }, { "key": "error_handling", "title": "Error handling", "description": "", "items": [ { "key": "error_codes", "title": "Analysis of Error Codes", "description": "OTG-ERR-001, WAHHM - Recon and Analysis", "vrt_category": "server_security_misconfiguration" }, { "key": "stack_traces", "title": "Analysis of Stack Traces", "description": "OTG-ERR-002, WAHHM - Recon and Analysis", "vrt_category": "server_security_misconfiguration" } ] }, { "key": "cryptography", "title": "Cryptography", "description": "", "items": [ { "key": "transport_layer_protection", "title": "Testing for Weak SSL/TSL Ciphers, Insufficient Transport Layer Protection", "description": "OTG-CRYPST-001, WAHHM - Test Handling of Access", "vrt_category": "server_security_misconfiguration" }, { "key": "padding_oracle", "title": "Testing for Padding Oracle", "description": "OTG-CRYPST-002, WAHHM - Test Handling of Access", "vrt_category": "broken_authentication_and_session_management" }, { "key": "unencrypted_channels", "title": "Testing for Sensitive information sent via unencrypted channels", "description": "OTG-CRYPST-003, WAHHM - Test Handling of Access", "vrt_category": "broken_authentication_and_session_management" } ] }, { "key": "business_logic", "title": "Business Logic Testing", "description": "", "items": [ { "key": "data_validation", "title": "Test Business Logic Data Validation", "description": "OTG-BUSLOGIC-001, WAHHM - Test for Logic Flaws", "vrt_category": "broken_access_control" }, { "key": "forge_requests", "title": "Test Ability to Forge Requests", "description": "OTG-BUSLOGIC-002, WAHHM - Test for Logic Flaws", "vrt_category": "server_side_injection" }, { "key": "integrity_check", "title": "Test Integrity Checks", "description": "OTG-BUSLOGIC-003, WAHHM - Test for Logic Flaws", "vrt_category": "broken_access_control" }, { "key": "process_timing", "title": "Test for Process Timing", "description": "OTG-BUSLOGIC-004, WAHHM - Test for Logic Flaws", "vrt_category": "server_side_injection" }, { "key": "usage_limits", "title": "Test Number of Times a Function Can be Used Limits", "description": "OTG-BUSLOGIC-005, WAHHM - Test for Logic Flaws", "vrt_category": "broken_access_control" }, { "key": "workflow_circumvention", "title": "Testing for the Circumvention of Work Flows", "description": "OTG-BUSLOGIC-006, WAHHM - Test for Logic Flaws", "vrt_category": "broken_access_control" }, { "key": "application_misuse", "title": "Test Defenses Against Application Mis-use", "description": "OTG-BUSLOGIC-007, WAHHM - Test for Logic Flaws" }, { "key": "upload_unexpected_files", "title": "Test Upload of Unexpected File Types", "description": "OTG-BUSLOGIC-008, WAHHM - Test for Logic Flaws" }, { "key": "malicious_files", "title": "Test Upload of Malicious Files", "description": "OTG-BUSLOGIC-009, WAHHM - Test for Logic Flaws", "vrt_category": "server_security_misconfiguration" } ] }, { "key": "client_side", "title": "Client Side Testing", "description": "", "items": [ { "key": "dom_based_xss", "title": "Testing for DOM based Cross Site Scripting", "description": "OTG-CLIENT-001, WAHHM - Miscellaneous Tests", "vrt_category": "cross_site_scripting_xss" }, { "key": "javascript_execution", "title": "Testing for JavaScript Execution", "description": "OTG-CLIENT-002, WAHHM - Test Handling of Input", "vrt_category": "cross_site_scripting_xss" }, { "key": "html_injection", "title": "Testing for HTML Injection", "description": "OTG-CLIENT-003, WAHHM - Test Handling of Input", "vrt_category": "server_side_injection" }, { "key": "url_redirect", "title": "Testing for Client Side URL Redirect", "description": "OTG-CLIENT-004, WAHHM - Test Handling of Input", "vrt_category": "unvalidated_redirects_and_forwards" }, { "key": "css_injection", "title": "Testing for CSS Injection", "description": "OTG-CLIENT-005, WAHHM - Test Handling of Input", "vrt_category": "server_security_misconfiguration" }, { "key": "resource_manipulation", "title": "Testing for Client Side Resource Manipulation", "description": "OTG-CLIENT-006, WAHHM - Test Handling of Input", "vrt_category": "server_security_misconfiguration" }, { "key": "cors", "title": "Test Cross Origin Resource Sharing", "description": "OTG-CLIENT-007, WAHHM - Miscellaneous Tests", "vrt_category": "server_security_misconfiguration" }, { "key": "cross_site_flashing", "title": "Testing for Cross Site Flashing", "description": "OTG-CLIENT-008, WAHHM - Test Handling of Input", "vrt_category": "server_security_misconfiguration" }, { "key": "clickjacking", "title": "Testing for Clickjacking", "description": "OTG-CLIENT-009, WAHHM - Miscellaneous Tests", "vrt_category": "server_security_misconfiguration" }, { "key": "web_sockets", "title": "Testing WebSockets", "description": "OTG-CLIENT-010, WAHHM - Test Handling of Input" }, { "key": "web_messaging", "title": "Test Web Messaging", "description": "OTG-CLIENT-011, WAHHM - Test Handling of Input" }, { "key": "local_storage", "title": "Test Local Storage", "description": "OTG-CLIENT-012, WAHHM - Miscellaneous Tests", "vrt_category": "server_security_misconfiguration" } ] } ] }
}