{

"metadata": {
  "title": "Website Testing",
  "release_date": "2021-05-31T00:00:00+00:00",
  "description": "Bugcrowd web methodology testing",
  "vrt_version": "10.0.1"
},
"content": {
  "steps": [
      {
      "key": "information",
      "title": "Information gathering",
      "description": "",
      "items": [
        {
          "key": "search_engine_discovery_and_reconnaissance",
          "title": "Conduct Search Engine Discovery and Reconnaissance for Information Leakage",
          "description": "OTG-INFO-001, WAHHM - Recon and Analysis",
          "vrt_category": "sensitive_data_exposure"
        },
        {
          "key": "fingerprint",
          "title": "Fingerprint Web Server",
          "description": "OTG-INFO-002, WAHHM - Recon and Analysis",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "webserver_metafiles",
          "title": "Review Webserver Metafiles for Information Leakage",
          "description": "OTG-INFO-003, WAHHM - Recon and Analysis"
        },
        {
          "key": "enumerate_applications",
          "title": "Enumerate Applications on Webserver",
          "description": "if in scope OTG-INFO-004, WAHHM - Recon and Analysis"
        },
        {
          "key": "webpage_comments_and_metadata",
          "title": "Review Webpage Comments and Metadata for Information Leakage",
          "description": "OTG-INFO-005, WAHHM - Recon and Analysis",
          "vrt_category": "sensitive_data_exposure"
        },
        {
          "key": "application_entry_points",
          "title": "Identify application entry points",
          "description": "OTG-INFO-006, WAHHM - Recon and Analysis"
        },
        {
          "key": "execution_paths",
          "title": "Map execution paths through application",
          "description": "OTG-INFO-007, WAHHM - Recon and Analysis"
        },
        {
          "key": "fingerprint_webapp_framework",
          "title": "Fingerprint Web Application Framework",
          "description": "OTG-INFO-008, WAHHM - Recon and Analysis"
        },
        {
          "key": "fingerprint_webapp",
          "title": "Fingerprint Web Application",
          "description": "OTG-INFO-009, WAHHM - Recon and Analysis"
        },
        {
          "key": "application_architecture",
          "title": "Map Application Architecture",
          "description": "OTG-INFO-010, WAHHM - Recon and Analysis"
        }
      ]
    },
    {
      "key": "config_and_deploy_management",
      "title": "Configuration and Deploy Management Testing",
      "description": "",
      "items": [
        {
          "key": "network_and_infrastructure",
          "title": "Test Network/Infrastructure Configuration",
          "description": "OTG-CONFIG-001, WAHHM - Recon and Analysis, Assess Application Hosting",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "application_platform",
          "title": "Test Application Platform Configuration",
          "description": "OTG-CONFIG-002, WAHHM - Recon and Analysis",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "file_extensions_handling",
          "title": "Test File Extensions Handling for Sensitive Information",
          "description": "OTG-CONFIG-003, WAHHM - Recon and Analysis",
          "vrt_category": "sensitive_data_exposure"
        },
        {
          "key": "backup_and_unreferenced_files",
          "title": "Backup and Unreferenced Files for Sensitive Information",
          "description": "OTG-CONFIG-004, WAHHM - Recon and Analysis",
          "vrt_category": "sensitive_data_exposure"
        },
        {
          "key": "admin_interfaces",
          "title": "Enumerate Infrastructure and Application Admin Interfaces",
          "description": "OTG-CONFIG-005, WAHHM - Recon and Analysis"
        },
        {
          "key": "http_methods",
          "title": "Test HTTP Methods",
          "description": "OTG-CONFIG-006, WAHHM - Test Handling of Access",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "http_transport_security",
          "title": "Test HTTP Strict Transport Security",
          "description": "OTG-CONFIG-007, WAHHM - Test Handling of Access",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "ria_cross_domain_policy",
          "title": "Test RIA cross domain policy",
          "description": "OTG-CONFIG-008, WAHHM - Test Handling of Access",
          "vrt_category": "server_security_misconfiguration"
        }
      ]
    },
    {
      "key": "identity_management",
      "title": "Identity Management Testing",
      "description": "",
      "items": [
        {
          "key": "role_definition",
          "title": "Test Role Definitions",
          "description": "OTG-IDENT-001, WAHHM - Test Handling of Access",
          "vrt_category": "broken_access_control"
        },
        {
          "key": "user_registration",
          "title": "Test User Registration Process",
          "description": "OTG-IDENT-002, WAHHM - Test Handling of Access",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "account_provisioning",
          "title": "Test Account Provisioning Process",
          "description": "OTG-IDENT-003, WAHHM - Test Handling of Access"
        },
        {
          "key": "guessable_user_accounts",
          "title": "Testing for Account Enumeration and Guessable User Account",
          "description": "OTG-IDENT-004, WAHHM - Test Handling of Access",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "username_policy",
          "title": "Testing for Weak or unenforced username policy",
          "description": "OTG-IDENT-005, WAHHM - Test Handling of Access",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "guest_accounts_permission",
          "title": "Test Permissions of Guest/Training Accounts",
          "description": "OTG-IDENT-006, WAHHM - Test Handling of Access",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "account_suspension_resumption",
          "title": "Test Account Suspension/Resumption Process",
          "description": "OTG-IDENT-007, WAHHM - Test Handling of Access",
          "vrt_category": "server_security_misconfiguration"
        }
      ]
    },
    {
      "key": "authentication",
      "title": "Authentication Testing",
      "description": "",
      "items": [
        {
          "key": "encrypted_credentials",
          "title": "Testing for Credentials Transported over an Encrypted Channel",
          "description": "OTG-AUTHN-001, WAHHM - Miscellaneous Tests",
          "vrt_category": "broken_authentication_and_session_management"
        },
        {
          "key": "default_credentials",
          "title": "Testing for default credentials",
          "description": "OTG-AUTHN-002, WAHHM - Test Handling of Access",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "lock_out_mechanism",
          "title": "Testing for Weak lock out mechanism",
          "description": "OTG-AUTHN-003, WAHHM - Test Handling of Access",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "bypass_schema",
          "title": "Testing for bypassing authentication schema",
          "description": "OTG-AUTHN-004, WAHHM - Test Handling of Access",
          "vrt_category": "broken_authentication_and_session_management"
        },
        {
          "key": "remember_password",
          "title": "Test remember password functionality",
          "description": "OTG-AUTHN-005, WAHHM - Test Handling of Access",
          "vrt_category": "broken_authentication_and_session_management"
        },
        {
          "key": "browser_cache",
          "title": "Testing for Browser cache weakness",
          "description": "OTG-AUTHN-006, WAHHM - Miscellaneous Tests",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "password_policy",
          "title": "Testing for Weak password policy",
          "description": "OTG-AUTHN-007, WAHHM - Test Handling of Access",
          "vrt_category": "insufficient_security_configurability"
        },
        {
          "key": "security_question",
          "title": "Testing for Weak security question/answer",
          "description": "OTG-AUTHN-008, WAHHM - Test Handling of Access",
          "vrt_category": "broken_authentication_and_session_management"
        },
        {
          "key": "change_password",
          "title": "Testing for weak password change or reset functionalities",
          "description": "OTG-AUTHN-009, WAHHM - Test Handling of Access",
          "vrt_category": "broken_authentication_and_session_management"
        },
        {
          "key": "alternative_channel",
          "title": "Testing for Weaker authentication in alternative channel",
          "description": "OTG-AUTHN-010, WAHHM - Test Handling of Access"
        }
      ]
    },
    {
      "key": "authorization",
      "title": "Authorization Testing",
      "description": "",
      "items": [
        {
          "key": "directory_traversal_and_file_include",
          "title": "Testing Directory traversal/file include",
          "description": "OTG-AUTHZ-001, WAHHM - Test Handling of Input",
          "vrt_category": "server_side_injection"
        },
        {
          "key": "bypass_schema",
          "title": "Testing for bypassing authorization schema",
          "description": "OTG-AUTHZ-002, WAHHM - Test Handling of Access",
          "vrt_category": "broken_access_control"
        },
        {
          "key": "privilege_escalation",
          "title": "Testing for Privilege Escalation",
          "description": "OTG-AUTHZ-003, WAHHM - Test Handling of Access",
          "vrt_category": "broken_authentication_and_session_management"
        },
        {
          "key": "direct_object_reference",
          "title": "Testing for Insecure Direct Object References",
          "description": "OTG-AUTHZ-004, WAHHM - Test Handling of Access",
          "vrt_category": "broken_access_control"
        }
      ]
    },
    {
      "key": "session_management",
      "title": "Session Management Testing",
      "description": "",
      "items": [
        {
          "key": "bypass_schema",
          "title": "Testing for Bypassing Session Management Schema",
          "description": "OTG-SESS-001, WAHHM - Test Handling of Access",
          "vrt_category": "broken_authentication_and_session_management"
        },
        {
          "key": "cookies",
          "title": "Testing for Cookies attributes",
          "description": "OTG-SESS-002, WAHHM - Test Handling of Access",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "fixation",
          "title": "Testing for Session Fixation",
          "description": "OTG-SESS-003, WAHHM - Test Handling of Access",
          "vrt_category": "broken_authentication_and_session_management"
        },
        {
          "key": "exposed_variables",
          "title": "Testing for Exposed Session Variables",
          "description": "OTG-SESS-004, WAHHM - Test Handling of Access",
          "vrt_category": "broken_authentication_and_session_management"
        },
        {
          "key": "csrf",
          "title": "Testing for Cross Site Request Forgery",
          "description": "OTG-SESS-005, WAHHM - Test Handling of Access",
          "vrt_category": "cross_site_request_forgery_csrf"
        },
        {
          "key": "logout",
          "title": "Testing for logout functionality",
          "description": "OTG-SESS-006, WAHHM - Test Handling of Access",
          "vrt_category": "broken_authentication_and_session_management"
        },
        {
          "key": "timeout",
          "title": "Test Session Timeout",
          "description": "OTG-SESS-007, WAHHM - Test Handling of Access",
          "vrt_category": "broken_authentication_and_session_management"
        },
        {
          "key": "puzzling",
          "title": "Testing for Session puzzling",
          "description": "OTG-SESS-008, WAHHM - Test Handling of Access",
          "vrt_category": "broken_authentication_and_session_management"
        }
      ]
    },
    {
      "key": "data_validation",
      "title": "Data Validation Testing",
      "description": "",
      "items": [
        {
          "key": "reflected_xss",
          "title": "Testing for Reflected Cross Site Scripting",
          "description": "OTG-INPVAL-001, WAHHM - Test Handling of Input"
        },
        {
          "key": "stored_xss",
          "title": "Testing for Stored Cross Site Scripting",
          "description": "OTG-INPVAL-002, WAHHM - Test Handling of Input",
          "vrt_category": "cross_site_scripting_xss"
        },
        {
          "key": "http_verb_tampering",
          "title": "Testing for HTTP Verb Tampering",
          "description": "OTG-INPVAL-003, WAHHM - Test Handling of Input",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "http_param_pollution",
          "title": "Testing for HTTP Parameter pollution",
          "description": "OTG-INPVAL-004, WAHHM - Test Handling of Input",
          "vrt_category": "server_side_injection"
        },
        {
          "key": "sql_injection",
          "title": "Testing for SQL Injection",
          "description": "OTG-INPVAL-005, WAHHM - Test Handling of Input",
          "vrt_category": "server_side_injection"
        },
        {
          "key": "oracle",
          "title": "Oracle Testing",
          "description": ""
        },
        {
          "key": "mysql",
          "title": "MySQL Testing",
          "description": ""
        },
        {
          "key": "sql_server",
          "title": "SQL Server Testing",
          "description": ""
        },
        {
          "key": "postgre_sql",
          "title": "Testing PostgreSQL",
          "description": ""
        },
        {
          "key": "ms_access",
          "title": "MS Access Testing",
          "description": ""
        },
        {
          "key": "nosql_injection",
          "title": "Testing for NoSQL injection",
          "description": ""
        },
        {
          "key": "ldap_injection",
          "title": "Testing for LDAP Injection",
          "description": "OTG-INPVAL-006, WAHHM - Test Handling of Input",
          "vrt_category": "server_side_injection"
        },
        {
          "key": "orm_injection",
          "title": "Testing for ORM Injection",
          "description": "OTG-INPVAL-007, WAHHM - Test Handling of Input",
          "vrt_category": "server_side_injection"
        },
        {
          "key": "xml_injection",
          "title": "Testing for XML Injection",
          "description": "OTG-INPVAL-008, WAHHM - Test Handling of Input",
          "vrt_category": "server_side_injection"
        },
        {
          "key": "ssi_injection",
          "title": "Testing for SSI Injection",
          "description": "OTG-INPVAL-009, WAHHM - Test Handling of Input",
          "vrt_category": "server_side_injection"
        },
        {
          "key": "xpath_injection",
          "title": "Testing for XPath Injection",
          "description": "OTG-INPVAL-010, WAHHM - Test Handling of Input",
          "vrt_category": "server_side_injection"
        },
        {
          "key": "imap_smtp_injection",
          "title": "IMAP/SMTP Injection",
          "description": "OTG-INPVAL-011, WAHHM - Test Handling of Input",
          "vrt_category": "server_side_injection"
        },
        {
          "key": "code_injection",
          "title": "Testing for Code Injection",
          "description": "OTG-INPVAL-012, WAHHM - Test Handling of Input",
          "vrt_category": "server_side_injection"
        },
        {
          "key": "local_file_inclusion",
          "title": "Testing for Local File Inclusion",
          "description": ""
        },
        {
          "key": "remote_file_inclusion",
          "title": "Testing for Remote File Inclusion",
          "description": ""
        },
        {
          "key": "command_injection",
          "title": "Testing for Command Injection",
          "description": "OTG-INPVAL-013, WAHHM - Test Handling of Input",
          "vrt_category": "server_side_injection"
        },
        {
          "key": "buffer_overflow",
          "title": "Testing for Buffer overflow",
          "description": "OTG-INPVAL-014, WAHHM - Test Handling of Input",
          "vrt_category": "server_side_injection"
        },
        {
          "key": "heap_overflow",
          "title": "Testing for Heap overflow",
          "description": ""
        },
        {
          "key": "stack_overflow",
          "title": "Testing for Stack overflow",
          "description": ""
        },
        {
          "key": "format_string",
          "title": "Testing for Format string",
          "description": ""
        },
        {
          "key": "incubated_vulnerabilities",
          "title": "Testing for incubated vulnerabilities",
          "description": "OTG-INPVAL-015, WAHHM - Test Handling of Input",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "http_splitting_and_smuggling",
          "title": "Testing for HTTP Splitting/Smuggling",
          "description": "OTG-INPVAL-016, WAHHM - Test Handling of Input",
          "vrt_category": "server_side_injection"
        }
      ]
    },
    {
      "key": "error_handling",
      "title": "Error handling",
      "description": "",
      "items": [
        {
          "key": "error_codes",
          "title": "Analysis of Error Codes",
          "description": "OTG-ERR-001, WAHHM - Recon and Analysis",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "stack_traces",
          "title": "Analysis of Stack Traces",
          "description": "OTG-ERR-002, WAHHM - Recon and Analysis",
          "vrt_category": "server_security_misconfiguration"
        }
      ]
    },
    {
      "key": "cryptography",
      "title": "Cryptography",
      "description": "",
      "items": [
        {
          "key": "transport_layer_protection",
          "title": "Testing for Weak SSL/TSL Ciphers, Insufficient Transport Layer Protection",
          "description": "OTG-CRYPST-001, WAHHM - Test Handling of Access",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "padding_oracle",
          "title": "Testing for Padding Oracle",
          "description": "OTG-CRYPST-002, WAHHM - Test Handling of Access",
          "vrt_category": "broken_authentication_and_session_management"
        },
        {
          "key": "unencrypted_channels",
          "title": "Testing for Sensitive information sent via unencrypted channels",
          "description": "OTG-CRYPST-003, WAHHM - Test Handling of Access",
          "vrt_category": "broken_authentication_and_session_management"
        }
      ]
    },
    {
      "key": "business_logic",
      "title": "Business Logic Testing",
      "description": "",
      "items": [
        {
          "key": "data_validation",
          "title": "Test Business Logic Data Validation",
          "description": "OTG-BUSLOGIC-001, WAHHM - Test for Logic Flaws",
          "vrt_category": "broken_access_control"
        },
        {
          "key": "forge_requests",
          "title": "Test Ability to Forge Requests",
          "description": "OTG-BUSLOGIC-002, WAHHM - Test for Logic Flaws",
          "vrt_category": "server_side_injection"
        },
        {
          "key": "integrity_check",
          "title": "Test Integrity Checks",
          "description": "OTG-BUSLOGIC-003, WAHHM - Test for Logic Flaws",
          "vrt_category": "broken_access_control"
        },
        {
          "key": "process_timing",
          "title": "Test for Process Timing",
          "description": "OTG-BUSLOGIC-004, WAHHM - Test for Logic Flaws",
          "vrt_category": "server_side_injection"
        },
        {
          "key": "usage_limits",
          "title": "Test Number of Times a Function Can be Used Limits",
          "description": "OTG-BUSLOGIC-005, WAHHM - Test for Logic Flaws",
          "vrt_category": "broken_access_control"
        },
        {
          "key": "workflow_circumvention",
          "title": "Testing for the Circumvention of Work Flows",
          "description": "OTG-BUSLOGIC-006, WAHHM - Test for Logic Flaws",
          "vrt_category": "broken_access_control"
        },
        {
          "key": "application_misuse",
          "title": "Test Defenses Against Application Mis-use",
          "description": "OTG-BUSLOGIC-007, WAHHM - Test for Logic Flaws"
        },
        {
          "key": "upload_unexpected_files",
          "title": "Test Upload of Unexpected File Types",
          "description": "OTG-BUSLOGIC-008, WAHHM - Test for Logic Flaws"
        },
        {
          "key": "malicious_files",
          "title": "Test Upload of Malicious Files",
          "description": "OTG-BUSLOGIC-009, WAHHM - Test for Logic Flaws",
          "vrt_category": "server_security_misconfiguration"
        }
      ]
    },
    {
      "key": "client_side",
      "title": "Client Side Testing",
      "description": "",
      "items": [
        {
          "key": "dom_based_xss",
          "title": "Testing for DOM based Cross Site Scripting",
          "description": "OTG-CLIENT-001, WAHHM -  Miscellaneous Tests",
          "vrt_category": "cross_site_scripting_xss"
        },
        {
          "key": "javascript_execution",
          "title": "Testing for JavaScript Execution",
          "description": "OTG-CLIENT-002, WAHHM - Test Handling of Input",
          "vrt_category": "cross_site_scripting_xss"
        },
        {
          "key": "html_injection",
          "title": "Testing for HTML Injection",
          "description": "OTG-CLIENT-003, WAHHM - Test Handling of Input",
          "vrt_category": "server_side_injection"
        },
        {
          "key": "url_redirect",
          "title": "Testing for Client Side URL Redirect",
          "description": "OTG-CLIENT-004, WAHHM - Test Handling of Input",
          "vrt_category": "unvalidated_redirects_and_forwards"
        },
        {
          "key": "css_injection",
          "title": "Testing for CSS Injection",
          "description": "OTG-CLIENT-005, WAHHM - Test Handling of Input",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "resource_manipulation",
          "title": "Testing for Client Side Resource Manipulation",
          "description": "OTG-CLIENT-006, WAHHM - Test Handling of Input",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "cors",
          "title": "Test Cross Origin Resource Sharing",
          "description": "OTG-CLIENT-007, WAHHM -  Miscellaneous Tests",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "cross_site_flashing",
          "title": "Testing for Cross Site Flashing",
          "description": "OTG-CLIENT-008, WAHHM - Test Handling of Input",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "clickjacking",
          "title": "Testing for Clickjacking",
          "description": "OTG-CLIENT-009, WAHHM -  Miscellaneous Tests",
          "vrt_category": "server_security_misconfiguration"
        },
        {
          "key": "web_sockets",
          "title": "Testing WebSockets",
          "description": "OTG-CLIENT-010, WAHHM - Test Handling of Input"
        },
        {
          "key": "web_messaging",
          "title": "Test Web Messaging",
          "description": "OTG-CLIENT-011, WAHHM - Test Handling of Input"
        },
        {
          "key": "local_storage",
          "title": "Test Local Storage",
          "description": "OTG-CLIENT-012, WAHHM -  Miscellaneous Tests",
          "vrt_category": "server_security_misconfiguration"
        }
      ]
    }
  ]
}

}