Do you have a similar project?
Post your project for free and meet the best Web Developers, receive quotes from qualified companies and hire the best candidate with our safe payment system.
Security testing will never be an exact science where a complete list of all possible issues that should be tested can be defined. Indeed, security testing is only an appropriate technique for testing the security of web applications under certain circumstances. The goal of this project is to collect all the possible testing techniques, explain these techniques, and keep the guide updated. The OWASP Web Application Security Testing method is based on the black box approach. The tester knows nothing or has very little information about the application to be tested.
The testing model consists of:
Tester: Who performs the testing activities
Tools and methodology: The core of this Testing Guide project
Application: The black box to test
The test is divided into 2 phases:
Phase 1 Passive mode:
In the passive mode the tester tries to understand the application's logic and plays with the application. Tools can be used for information gathering. For example, an HTTP proxy can be used to observe all the HTTP requests and responses. At the end of this phase, the tester should understand all the access points (gates) of the application (e.g., HTTP headers, parameters, and cookies). The Information Gathering section explains how to perform a passive mode test.
Phase 2 Active mode:
In this phase the tester begins to test using the methodology described in the follow sections. The set of active tests have been split into 11 sub-categories for a total of 91 controls:
Configuration and Deployment Management Testing
Identity Management Testing
Session Management Testing
Input Validation Testing
Business Logic Testing
Client Side Testing
And some changes little bit.
OWASP is open source so you can easily find the code and i need development in .net or php.
Whatever your feasibility and thing should be work properly.
I attached one document with this please check reply as soon as possible.
I need this work within 2 to 3 weeks. I dont have that much budget. around $100. Please send message if interested.
It is too simple just integration.