OWASP Top Ten

https://owasp.org/www-project-top-ten/
Admin
The OWASP Top Ten is a standard awareness document for developers and web application security,...
Tokens:118,733
Snippets:365
Trust Score:10
Update:1 year ago
Show doc for...
Tokens:
Raw
### OWASP Chapter Information

Source: https://owasp.org/www-project-top-ten/2017/de/Naechste_Schritte_fuer_Anwendungs-Verantwortliche

Links to information about OWASP chapters worldwide and how to start a new one.

```markdown
* [Find a Local Chapter...](https://owasp.org/chapters/)
* [Start a Local Chapter...](https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666)
```

--------------------------------

### OWASP Chapter Navigation

Source: https://owasp.org/www-project-top-ten/2017/de/A5_2017-Fehler_in_der_Zugriffskontrolle

Links to find local OWASP chapters by region and information on how to start a new chapter.

```markdown
* [Find a Local Chapter...](https://owasp.org/chapters/)
* [Africa](https://owasp.org/chapters/#Africa)
* [Asia](https://owasp.org/chapters/#Asia)
* [Caribbean](https://owasp.org/chapters/#TheCarribean)
* [Central America](https://owasp.org/chapters/#CentralAmerica)
* [Europe](https://owasp.org/chapters/#Europe)
* [North America](https://owasp.org/chapters/#NorthAmerica)
* [Oceania](https://owasp.org/chapters/#Oceania)
* [South America](https://owasp.org/chapters/#SouthAmerica)
* [Start a Local Chapter...](https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666)
```

--------------------------------

### OWASP Chapter Links

Source: https://owasp.org/www-project-top-ten/2017/Release_Notes

Provides links to OWASP chapters by region and information on starting a new chapter.

```html
<ul>
  <li><a href="https://owasp.org/chapters/">Find a Local Chapter...</a></li>
  <li><a href="https://owasp.org/chapters/#Africa">Africa</a></li>
  <li><a href="https://owasp.org/chapters/#Asia">Asia</a></li>
  <li><a href="https://owasp.org/chapters/#TheCarribean">Caribbean</a></li>
  <li><a href="https://owasp.org/chapters/#CentralAmerica">Central America</a></li>
  <li><a href="https://owasp.org/chapters/#Europe">Europe</a></li>
  <li><a href="https://owasp.org/chapters/#NorthAmerica">North America</a></li>
  <li><a href="https://owasp.org/chapters/#Oceania">Oceania</a></li>
  <li><a href="https://owasp.org/chapters/#SouthAmerica">South America</a></li>
  <li><a href="https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666">Start a Local Chapter...</a></li>
  <li><a href="https://owasp.org/chapters/events/">Upcoming Chapter Events</a></li>
</ul>
```

--------------------------------

### About OWASP

Source: https://owasp.org/www-project-top-ten/2017/de/A10_2017-Unzureichendes_Logging%2526Monitoring

Links to information about OWASP, including its mission, governance, staff, and ways to get involved.

```markdown
* [ABOUT](https://owasp.org/about/)
    * [About OWASP](https://owasp.org/about/)
    * [Awards](https://owasp.org/awards/)
    * [Careers](https://owasp.org/careers/)
    * [Committees](https://owasp.org/committees/)
    * [Contact Us](https://owasp.org/contact/)
    * [Corporate Supporters](https://owasp.org/supporters/)
    * [Donate](https://owasp.org/donate/)
    * [Finance](https://owasp.org/finance/)
    * [Global Board](https://owasp.org/www-board/)
    * [Global Board EU](https://owasp.org/www-board-eu/)
    * [Governance](https://owasp.org/governance/)
    * [Membership Portal](https://owasp.glueup.com)
    * [Opinions & News](https://owasp.org/news/)
    * [Policies](https://owasp.org/www-policy/)
    * [Staff](https://owasp.org/corporate/)
    * [Video](https://www.youtube.com/user/OWASPGLOBAL/videos)
```

--------------------------------

### OWASP Chapter Links

Source: https://owasp.org/www-project-top-ten/2017/Note_About_Risks

Provides links to OWASP chapters worldwide and information on starting a new chapter.

```html
<ul>
  <li><a href="https://owasp.org/chapters/">Find a Local Chapter...</a></li>
  <li><a href="https://owasp.org/chapters/#Africa">Africa</a></li>
  <li><a href="https://owasp.org/chapters/#Asia">Asia</a></li>
  <li><a href="https://owasp.org/chapters/#TheCarribean">Caribbean</a></li>
  <li><a href="https://owasp.org/chapters/#CentralAmerica">Central America</a></li>
  <li><a href="https://owasp.org/chapters/#Europe">Europe</a></li>
  <li><a href="https://owasp.org/chapters/#NorthAmerica">North America</a></li>
  <li><a href="https://owasp.org/chapters/#Oceania">Oceania</a></li>
  <li><a href="https://owasp.org/chapters/#SouthAmerica">South America</a></li>
  <li><a href="https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666">Start a Local Chapter...</a></li>
</ul>
```

--------------------------------

### OWASP Chapter Navigation

Source: https://owasp.org/www-project-top-ten/2017/de/Vorwort_der_deutschen_Version

Links to OWASP chapters by region and provides information on starting a new chapter.

```markdown
* [Find a Local Chapter...](https://owasp.org/chapters/)
* [Africa](https://owasp.org/chapters/#Africa)
* [Asia](https://owasp.org/chapters/#Asia)
* [Caribbean](https://owasp.org/chapters/#TheCarribean)
* [Central America](https://owasp.org/chapters/#CentralAmerica)
* [Europe](https://owasp.org/chapters/#Europe)
* [North America](https://owasp.org/chapters/#NorthAmerica)
* [Oceania](https://owasp.org/chapters/#Oceania)
* [South America](https://owasp.org/chapters/#SouthAmerica)
* [Start a Local Chapter...](https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666)
```

--------------------------------

### OWASP Chapter Navigation

Source: https://owasp.org/www-project-top-ten/2017/de/Naechste_Schritte_fuer_Software-Entwickler

Lists links to OWASP chapters by region and provides information on how to find or start a local chapter.

```markdown
* [Find a Local Chapter...](https://owasp.org/chapters/)
* [Africa](https://owasp.org/chapters/#Africa)
* [Asia](https://owasp.org/chapters/#Asia)
* [Caribbean](https://owasp.org/chapters/#TheCarribean)
* [Central America](https://owasp.org/chapters/#CentralAmerica)
* [Europe](https://owasp.org/chapters/#Europe)
* [North America](https://owasp.org/chapters/#NorthAmerica)
* [Oceania](https://owasp.org/chapters/#Oceania)
* [South America](https://owasp.org/chapters/#SouthAmerica)
* [Start a Local Chapter...](https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666)
```

--------------------------------

### OWASP Chapter Navigation

Source: https://owasp.org/www-project-top-ten/2017/de/Anmerkungen_zum_Risikobegriff

Links to OWASP chapters by region and provides information on starting a new chapter.

```markdown
* [Find a Local Chapter...](https://owasp.org/chapters/)
* [Africa](https://owasp.org/chapters/#Africa)
* [Asia](https://owasp.org/chapters/#Asia)
* [Caribbean](https://owasp.org/chapters/#TheCarribean)
* [Central America](https://owasp.org/chapters/#CentralAmerica)
* [Europe](https://owasp.org/chapters/#Europe)
* [North America](https://owasp.org/chapters/#NorthAmerica)
* [Oceania](https://owasp.org/chapters/#Oceania)
* [South America](https://owasp.org/chapters/#SouthAmerica)
* [Start a Local Chapter...](https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666)
```

--------------------------------

### OWASP Chapter Navigation

Source: https://owasp.org/www-project-top-ten/2017/de/Top_10

Links to find local OWASP chapters by region and information on starting a new chapter.

```markdown
* [Find a Local Chapter...](https://owasp.org/chapters/)
* [Africa](https://owasp.org/chapters/#Africa)
* [Asia](https://owasp.org/chapters/#Asia)
* [Caribbean](https://owasp.org/chapters/#TheCarribean)
* [Central America](https://owasp.org/chapters/#CentralAmerica)
* [Europe](https://owasp.org/chapters/#Europe)
* [North America](https://owasp.org/chapters/#NorthAmerica)
* [Oceania](https://owasp.org/chapters/#Oceania)
* [South America](https://owasp.org/chapters/#SouthAmerica)
* [Start a Local Chapter...](https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666)
```

--------------------------------

### OWASP Chapter Navigation

Source: https://owasp.org/www-project-top-ten/2017/A8_2017-Insecure_Deserialization

Links to find local OWASP chapters across different regions and information on starting a new chapter.

```markdown
* [Find a Local Chapter...](https://owasp.org/chapters/)
* [Africa](https://owasp.org/chapters/#Africa)
* [Asia](https://owasp.org/chapters/#Asia)
* [Caribbean](https://owasp.org/chapters/#TheCarribean)
* [Central America](https://owasp.org/chapters/#CentralAmerica)
* [Europe](https://owasp.org/chapters/#Europe)
* [North America](https://owasp.org/chapters/#NorthAmerica)
* [Oceania](https://owasp.org/chapters/#Oceania)
* [South America](https://owasp.org/chapters/#SouthAmerica)
* [Start a Local Chapter...](https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666)
```

--------------------------------

### About OWASP Navigation

Source: https://owasp.org/www-project-top-ten/2017/de/Methodik_und_Daten

Links to information about OWASP, including its mission, governance, staff, and ways to get involved.

```markdown
* [ABOUT](https://owasp.org/about/)
    * [About OWASP](https://owasp.org/about/)
    * [Awards](https://owasp.org/awards/)
    * [Careers](https://owasp.org/careers/)
    * [Committees](https://owasp.org/committees/)
    * [Contact Us](https://owasp.org/contact/)
    * [Corporate Supporters](https://owasp.org/supporters/)
    * [Donate](https://owasp.org/donate/)
    * [Finance](https://owasp.org/finance/)
    * [Global Board](https://owasp.org/www-board/)
    * [Global Board EU](https://owasp.org/www-board-eu/)
    * [Governance](https://owasp.org/governance/)
    * [Membership Portal](https://owasp.glueup.com)
    * [Opinions & News](https://owasp.org/news/)
    * [Policies](https://owasp.org/www-policy/)
    * [Staff](https://owasp.org/corporate/)
    * [Video](https://www.youtube.com/user/OWASPGLOBAL/videos)
```

--------------------------------

### OWASP Chapters Navigation

Source: https://owasp.org/www-project-top-ten/2017/de/Vorwort_der_deutschen_Version

Provides links to OWASP chapter information, including regional listings and instructions on how to start a new chapter.

```text
* [CHAPTERS](https://owasp.org/chapters/)
    * [Find a Local Chapter...](https://owasp.org/chapters/)
    * [Africa](https://owasp.org/chapters/#Africa)
    * [Asia](https://owasp.org/chapters/#Asia)
    * [Caribbean](https://owasp.org/chapters/#TheCarribean)
    * [Central America](https://owasp.org/chapters/#CentralAmerica)
    * [Europe](https://owasp.org/chapters/#Europe)
    * [North America](https://owasp.org/chapters/#NorthAmerica)
    * [Oceania](https://owasp.org/chapters/#Oceania)
    * [South America](https://owasp.org/chapters/#SouthAmerica)
    * [Start a Local Chapter...](https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666)
```

--------------------------------

### OWASP About and Support Links

Source: https://owasp.org/www-project-top-ten/2017/de/Naechste_Schritte_fuer_Anwendungs-Verantwortliche

Provides links to information about OWASP, its mission, and ways to get involved or support the organization.

```markdown
* [Donate Now!](https://owasp.org/donate/)
* [About OWASP](https://owasp.org/about/)
* [Awards](https://owasp.org/awards/)
* [Careers](https://owasp.org/careers/)
* [Committees](https://owasp.org/committees/)
* [Contact Us](https://owasp.org/contact/)
* [Corporate Supporters](https://owasp.org/supporters/)
* [Finance](https://owasp.org/finance/)
* [Global Board](https://owasp.org/www-board/)
* [Global Board EU](https://owasp.org/www-board-eu/)
* [Governance](https://owasp.org/governance/)
* [Membership Portal](https://owasp.glueup.com)
* [Opinions & News](https://owasp.org/news/)
* [Policies](https://owasp.org/www-policy/)
* [Staff](https://owasp.org/corporate/)
* [Video](https://www.youtube.com/user/OWASPGLOBAL/videos)
* [MAKE A DONATION](https://owasp.org/donate)
* [BECOME A MEMBER](https://owasp.org/membership)
* [SITEMAP](https://owasp.org/sitemap)
```

--------------------------------

### OWASP Chapter Information

Source: https://owasp.org/www-project-top-ten/2017/de/A10_2017-Unzureichendes_Logging%2526Monitoring

Links to information about OWASP chapters worldwide, including regional listings and instructions on how to start a new chapter.

```markdown
* [Find a Local Chapter...](https://owasp.org/chapters/)
* [Africa](https://owasp.org/chapters/#Africa)
* [Asia](https://owasp.org/chapters/#Asia)
* [Caribbean](https://owasp.org/chapters/#TheCarribean)
* [Central America](https://owasp.org/chapters/#CentralAmerica)
* [Europe](https://owasp.org/chapters/#Europe)
* [North America](https://owasp.org/chapters/#NorthAmerica)
* [Oceania](https://owasp.org/chapters/#Oceania)
* [South America](https://owasp.org/chapters/#SouthAmerica)
* [Start a Local Chapter...](https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666)
```

--------------------------------

### OWASP Chapter Navigation

Source: https://owasp.org/www-project-top-ten/2017/Top_10

Links to find local OWASP chapters by continent and information on starting a new chapter.

```markdown
* [Find a Local Chapter...](https://owasp.org/chapters/)
* [Africa](https://owasp.org/chapters/#Africa)
* [Asia](https://owasp.org/chapters/#Asia)
* [Caribbean](https://owasp.org/chapters/#TheCarribean)
* [Central America](https://owasp.org/chapters/#CentralAmerica)
* [Europe](https://owasp.org/chapters/#Europe)
* [North America](https://owasp.org/chapters/#NorthAmerica)
* [Oceania](https://owasp.org/chapters/#Oceania)
* [South America](https://owasp.org/chapters/#SouthAmerica)
* [Start a Local Chapter...](https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666)
```

--------------------------------

### OWASP Chapter Navigation

Source: https://owasp.org/www-project-top-ten/2017/A1_2017-Injection

Provides links to find local OWASP chapters across different regions and information on starting a new chapter.

```html
<ul>
  <li><a href="https://owasp.org/chapters/">Find a Local Chapter...</a></li>
  <li><a href="https://owasp.org/chapters/#Africa">Africa</a></li>
  <li><a href="https://owasp.org/chapters/#Asia">Asia</a></li>
  <li><a href="https://owasp.org/chapters/#TheCarribean">Caribbean</a></li>
  <li><a href="https://owasp.org/chapters/#CentralAmerica">Central America</a></li>
  <li><a href="https://owasp.org/chapters/#Europe">Europe</a></li>
  <li><a href="https://owasp.org/chapters/#NorthAmerica">North America</a></li>
  <li><a href="https://owasp.org/chapters/#Oceania">Oceania</a></li>
  <li><a href="https://owasp.org/chapters/#SouthAmerica">South America</a></li>
  <li><a href="https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666">Start a Local Chapter...</a></li>
</ul>
```

--------------------------------

### OWASP Chapters

Source: https://owasp.org/www-project-top-ten/2017/de/A10_2017-Unzureichendes_Logging%2526Monitoring

Links to OWASP chapters worldwide, including regional listings and information on starting a new chapter.

```markdown
* [CHAPTERS](https://owasp.org/chapters/)
    * [Find a Local Chapter...](https://owasp.org/chapters/)
    * [Africa](https://owasp.org/chapters/#Africa)
    * [Asia](https://owasp.org/chapters/#Asia)
    * [Caribbean](https://owasp.org/chapters/#TheCarribean)
    * [Central America](https://owasp.org/chapters/#CentralAmerica)
    * [Europe](https://owasp.org/chapters/#Europe)
    * [North America](https://owasp.org/chapters/#NorthAmerica)
    * [Oceania](https://owasp.org/chapters/#Oceania)
    * [South America](https://owasp.org/chapters/#SouthAmerica)
    * [Start a Local Chapter...](https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666)
```

--------------------------------

### OWASP Chapter Navigation

Source: https://owasp.org/www-project-top-ten/2017/de/A2_2017-Fehler_in_der_Authentifizierung

Links to OWASP chapters worldwide, categorized by continent, and provides information on starting a local chapter.

```markdown
* [Find a Local Chapter...](https://owasp.org/chapters/)
* [Africa](https://owasp.org/chapters/#Africa)
* [Asia](https://owasp.org/chapters/#Asia)
* [Caribbean](https://owasp.org/chapters/#TheCarribean)
* [Central America](https://owasp.org/chapters/#CentralAmerica)
* [Europe](https://owasp.org/chapters/#Europe)
* [North America](https://owasp.org/chapters/#NorthAmerica)
* [Oceania](https://owasp.org/chapters/#Oceania)
* [South America](https://owasp.org/chapters/#SouthAmerica)
* [Start a Local Chapter...](https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666)
```

--------------------------------

### OWASP Chapter Navigation

Source: https://owasp.org/www-project-top-ten/2017/de/A6_2017-Security_Misconfiguration

Provides links to find local OWASP chapters across different continents and information on starting a new chapter.

```markdown
CHAPTERS
    * [Find a Local Chapter...](https://owasp.org/chapters/)
    * [Africa](https://owasp.org/chapters/#Africa)
    * [Asia](https://owasp.org/chapters/#Asia)
    * [Caribbean](https://owasp.org/chapters/#TheCarribean)
    * [Central America](https://owasp.org/chapters/#CentralAmerica)
    * [Europe](https://owasp.org/chapters/#Europe)
    * [North America](https://owasp.org/chapters/#NorthAmerica)
    * [Oceania](https://owasp.org/chapters/#Oceania)
    * [South America](https://owasp.org/chapters/#SouthAmerica)
    * [Start a Local Chapter...](https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666)
```

--------------------------------

### Example Exploitable Component Vulnerability

Source: https://owasp.org/www-project-top-ten/2017/A9_2017-Using_Components_with_Known_Vulnerabilities

An example of a specific component vulnerability (CVE-2017-5638) in Apache Struts 2 that led to remote code execution and significant data breaches.

```en
CVE-2017-5638: Struts 2 remote code execution vulnerability
```

--------------------------------

### PHP Object Serialization Example

Source: https://owasp.org/www-project-top-ten/2017/de/A8_2017-Unsichere_Deserialisierung

Demonstrates a PHP object serialization used to create a 'super-cookie' containing user information. This example highlights how serialized data can be manipulated for attacks.

```PHP
a:4:{i:0;i:132;i:1;s:7:"Mallory";i:2;s:4:"user";
i:3;s:32:"b6a8b3bea87fe0e05022f8f3c88bc960";}
```

--------------------------------

### PHP Object Serialization Example

Source: https://owasp.org/www-project-top-ten/2017/de/A8_2017-Insecure_Deserialization

Demonstrates a PHP object serialization used to create a 'super-cookie' containing user information. This example highlights how serialized data can be manipulated for attacks.

```PHP
a:4:{i:0;i:132;i:1;s:7:"Mallory";i:2;s:4:"user";
i:3;s:32:"b6a8b3bea87fe0e05022f8f3c88bc960";}
```

--------------------------------

### OWASP Top Ten 2017 Foreword

Source: https://owasp.org/www-project-top-ten/2017/Foreword

Link to the foreword of the OWASP Top Ten 2017 document.

```html
* [](https://owasp.org/www-project-top-ten/2017/Foreword.html)
    * [](https://owasp.org/www-project-top-ten/2017/Foreword.html)
```

--------------------------------

### OWASP About and Support

Source: https://owasp.org/www-project-top-ten/2017/de/A10_2017-Unzureichendes_Logging%2526Monitoring

Provides links for donating to OWASP, becoming a member, and accessing information about the organization, its governance, and staff.

```markdown
* [About OWASP](https://owasp.org/about/)
* [Awards](https://owasp.org/awards/)
* [Careers](https://owasp.org/careers/)
* [Committees](https://owasp.org/committees/)
* [Contact Us](https://owasp.org/contact/)
* [Corporate Supporters](https://owasp.org/supporters/)
* [Donate](https://owasp.org/donate)
* [Finance](https://owasp.org/finance/)
* [Global Board](https://owasp.org/www-board/)
* [Global Board EU](https://owasp.org/www-board-eu/)
* [Governance](https://owasp.org/governance/)
* [Membership Portal](https://owasp.glueup.com)
* [Opinions & News](https://owasp.org/news/)
* [Policies](https://owasp.org/www-policy/)
* [Staff](https://owasp.org/corporate/)
* [Video](https://www.youtube.com/user/OWASPGLOBAL/videos)
* [MAKE A DONATION](https://owasp.org/donate)
* [BECOME A MEMBER](https://owasp.org/membership)
* [SITEMAP](https://owasp.org/sitemap)
```

--------------------------------

### Example Attack Scenario: SQL Injection and Data Decryption

Source: https://owasp.org/www-project-top-ten/2017/A3_2017-Sensitive_Data_Exposure

An example scenario where sensitive data is exposed due to a combination of automatic database encryption and a SQL injection vulnerability.

```scenario
An application encrypts credit card numbers in a database using automatic database encryption. However, this data is automatically decrypted when retrieved, allowing a SQL injection flaw to retrieve credit card numbers in clear text.
```

--------------------------------

### OWASP Chapter Navigation

Source: https://owasp.org/www-project-top-ten/2017/de/A7_2017-Cross-Site_Scripting_%28XSS%29

Links to information about OWASP chapters worldwide, including how to find local chapters, regional listings, and how to start a new chapter.

```markdown
* [Find a Local Chapter...](https://owasp.org/chapters/)
* [Africa](https://owasp.org/chapters/#Africa)
* [Asia](https://owasp.org/chapters/#Asia)
* [Caribbean](https://owasp.org/chapters/#TheCarribean)
* [Central America](https://owasp.org/chapters/#CentralAmerica)
* [Europe](https://owasp.org/chapters/#Europe)
* [North America](https://owasp.org/chapters/#NorthAmerica)
* [Oceania](https://owasp.org/chapters/#Oceania)
* [South America](https://owasp.org/chapters/#SouthAmerica)
* [Start a Local Chapter...](https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666)
```

--------------------------------

### SQL Injection Attack Example

Source: https://owasp.org/www-project-top-ten/2017/de/A1_2017-Injection

Shows an example of how an attacker might exploit an SQL injection vulnerability by manipulating the 'id' parameter in a URL to bypass authentication or retrieve unauthorized data.

```APIDOC
URL:
  http://example.com/app/accountView?id=' or '1'='1

Description:
  This URL attempts to exploit an SQL injection vulnerability by appending ' or '1'='1' to the 'id' parameter. If the application is vulnerable, this condition will always evaluate to true, potentially returning all records from the 'accounts' table instead of a specific customer's data.
```

--------------------------------

### SQL Injection Attack Payload Example

Source: https://owasp.org/www-project-top-ten/2017/A1_2017-Injection

Provides an example of a malicious payload used to exploit SQL injection vulnerabilities by manipulating the 'id' parameter to alter the query's logic.

```HTTP
http://example.com/app/accountView?id=' or '1'='1
```

--------------------------------

### OWASP Testing Guide: Authorization Testing

Source: https://owasp.org/www-project-top-ten/2017/A5_2017-Broken_Access_Control

This reference links to the OWASP Web Security Testing Guide, specifically the section on Authorization Testing. It provides methodologies and techniques for testing authorization flaws in web applications.

```en
https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/05-Authorization_Testing/README
```

--------------------------------

### OWASP About and Support Navigation

Source: https://owasp.org/www-project-top-ten/2017/de/Naechste_Schritte_fuer_Software-Entwickler

Contains links related to OWASP's mission, including 'About OWASP', 'Donate', 'Membership', 'Corporate Supporters', and 'Careers'. Also includes links to 'Sitemap' and contact information.

```markdown
* [About OWASP](https://owasp.org/about/)
* [Awards](https://owasp.org/awards/)
* [Careers](https://owasp.org/careers/)
* [Committees](https://owasp.org/committees/)
* [Contact Us](https://owasp.org/contact/)
* [Corporate Supporters](https://owasp.org/supporters/)
* [Donate](https://owasp.org/donate/)
* [Finance](https://owasp.org/finance/)
* [Global Board](https://owasp.org/www-board/)
* [Global Board EU](https://owasp.org/www-board-eu/)
* [Governance](https://owasp.org/governance/)
* [Membership Portal](https://owasp.glueup.com)
* [Opinions & News](https://owasp.org/news/)
* [Policies](https://owasp.org/www-policy/)
* [Staff](https://owasp.org/corporate/)
* [Video](https://www.youtube.com/user/OWASPGLOBAL/videos)
* [MAKE A DONATION](https://owasp.org/donate)
* [BECOME A MEMBER](https://owasp.org/membership)
* [SITEMAP](https://owasp.org/sitemap)
```

--------------------------------

### OWASP Support Links

Source: https://owasp.org/www-project-top-ten/2017/de/Methodik_und_Daten

Links for supporting OWASP through donations and joining as a member.

```markdown
[](https://owasp.org/store) [Donate](https://owasp.org/donate?reponame=www-project-top-ten&title=Methodik+und+Daten) [Join](https://owasp.org/membership)
This website uses cookies to analyze our traffic and only share that information with our analytics partners.
Accept
x
[](https://owasp.org/store)
[Donate](https://owasp.org/donate?reponame=www-project-top-ten&title=Methodik+und+Daten)
[Join](https://owasp.org/membership)
OWASP Top Ten 2017 (de)
```

--------------------------------

### About OWASP Information

Source: https://owasp.org/www-project-top-ten/2017/de/Danksagung

Links to information about the OWASP organization, including its mission, governance, and ways to get involved.

```text
* [About OWASP](https://owasp.org/about/)
* [Awards](https://owasp.org/awards/)
* [Careers](https://owasp.org/careers/)
* [Committees](https://owasp.org/committees/)
* [Contact Us](https://owasp.org/contact/)
* [Corporate Supporters](https://owasp.org/supporters/)
* [Donate](https://owasp.org/donate/)
* [Finance](https://owasp.org/finance/)
* [Global Board](https://owasp.org/www-board/)
* [Global Board EU](https://owasp.org/www-board-eu/)
* [Governance](https://owasp.org/governance/)
* [Membership Portal](https://owasp.glueup.com)
* [Opinions & News](https://owasp.org/news/)
* [Policies](https://owasp.org/www-policy/)
* [Staff](https://owasp.org/corporate/)
* [Video](https://www.youtube.com/user/OWASPGLOBAL/videos)
```

--------------------------------

### OWASP Support and Engagement

Source: https://owasp.org/www-project-top-ten/2017/de/Naechste_Schritte_fuer_Sicherheitstester

Links for donating to OWASP, becoming a member, and accessing the sitemap.

```markdown
* [MAKE A DONATION](https://owasp.org/donate)
* [BECOME A MEMBER](https://owasp.org/membership)
* [SITEMAP](https://owasp.org/sitemap)
```

--------------------------------

### OWASP Donation and Membership Links

Source: https://owasp.org/www-project-top-ten/2017/de/A10_2017-Unzureichendes_Logging%2526Monitoring

Links for donating to OWASP and joining as a member.

```markdown
[](https://owasp.org/store) [Donate](https://owasp.org/donate?reponame=www-project-top-ten&title=A10%3A2017-Unzureichendes+Logging+%26+Monitoring) [Join](https://owasp.org/membership)
[](https://owasp.org/store)
[Donate](https://owasp.org/donate?reponame=www-project-top-ten&title=A10%3A2017-Unzureichendes+Logging+%26+Monitoring)
[Join](https://owasp.org/membership)
```

--------------------------------

### OWASP Project Navigation

Source: https://owasp.org/www-project-top-ten/2017/Methodology_and_Data

Provides links to various OWASP projects, including the Top Ten, ASVS, GenAI Security, AI Exchange, Dependency Track, Juice Shop, and more. Also includes links for contributing to projects and starting new ones.

```html
<ul>
  <li><a href="https://owasp.org/projects/">Browse All Projects...</a></li>
  <li><a href="https://nest.owasp.org/contribute">Contribute to projects...</a></li>
  <li><a href="https://owasp.org/www-project-top-ten/">OWASP Top Ten</a></li>
  <li><a href="https://owasp.org/www-project-application-security-verification-standard/">OWASP Application Security Verification Standard</a></li>
  <li><a href="https://genai.owasp.org/">OWASP GenAI Security Project</a></li>
  <li><a href="https://owaspai.org/">OWASP AI Exchange</a></li>
  <li><a href="https://cyclonedx.org/">OWASP CycloneDX Secure Bill of Materials</a></li>
  <li><a href="https://owasp.org/www-project-dependency-track/">OWASP Dependency Track</a></li>
  <li><a href="https://owasp.org/www-project-juice-shop/">OWASP Juice Shop</a></li>
  <li><a href="https://owasp.org/mas/">OWASP Mobile Application Security</a></li>
  <li><a href="https://owasp.org/www-project-modsecurity-core-rule-set/">OWASP ModSecurity Core Rule Set</a></li>
  <li><a href="https://owasp.org/www-project-samm/">OWASP Software Assurance Maturity Model (SAMM)</a></li>
  <li><a href="https://owasp.org/www-project-web-security-testing-guide/">OWASP Web Security Testing Guide</a></li>
  <li><a href="https://owasporg.atlassian.net/servicedesk/customer/portal/7/create/70?src=-1419759666">Start a New Project...</a></li>
  <li><a href="https://owasp.org/www-community/">Community Contributions</a></li>
  <li><a href="https://owasp.org/gsoc">Google Summer of Code</a></li>
</ul>
```

--------------------------------

### OWASP About Links

Source: https://owasp.org/www-project-top-ten/2017/Release_Notes

Provides links to information about OWASP, including its mission, governance, and ways to get involved.

```html
<ul>
  <li><a href="https://owasp.org/about/">About OWASP</a></li>
  <li><a href="https://owasp.org/awards/">Awards</a></li>
  <li><a href="https://owasp.org/careers/">Careers</a></li>
  <li><a href="https://owasp.org/committees/">Committees</a></li>
  <li><a href="https://owasp.org/contact/">Contact Us</a></li>
  <li><a href="https://owasp.org/supporters/">Corporate Supporters</a></li>
  <li><a href="https://owasp.org/donate/">Donate</a></li>
  <li><a href="https://owasp.org/finance/">Finance</a></li>
  <li><a href="https://owasp.org/www-board/">Global Board</a></li>
  <li><a href="https://owasp.org/www-board-eu/">Global Board EU</a></li>
  <li><a href="https://owasp.org/governance/">Governance</a></li>
  <li><a href="https://owasp.glueup.com">Membership Portal</a></li>
  <li><a href="https://owasp.org/news/">Opinions & News</a></li>
  <li><a href="https://owasp.org/www-policy/">Policies</a></li>
  <li><a href="https://owasp.org/corporate/">Staff</a></li>
  <li><a href="https://www.youtube.com/user/OWASPGLOBAL/videos">Video</a></li>
</ul>
```

--------------------------------

### OWASP About Links

Source: https://owasp.org/www-project-top-ten/2017/Note_About_Risks

Provides links to information about OWASP, including its mission, governance, and ways to get involved.

```html
<ul>
  <li><a href="https://owasp.org/about/">About OWASP</a></li>
  <li><a href="https://owasp.org/awards/">Awards</a></li>
  <li><a href="https://owasp.org/careers/">Careers</a></li>
  <li><a href="https://owasp.org/committees/">Committees</a></li>
  <li><a href="https://owasp.org/contact/">Contact Us</a></li>
  <li><a href="https://owasp.org/supporters/">Corporate Supporters</a></li>
  <li><a href="https://owasp.org/donate/">Donate</a></li>
  <li><a href="https://owasp.org/finance/">Finance</a></li>
  <li><a href="https://owasp.org/www-board/">Global Board</a></li>
  <li><a href="https://owasp.org/www-board-eu/">Global Board EU</a></li>
  <li><a href="https://owasp.org/governance/">Governance</a></li>
  <li><a href="https://owasp.glueup.com">Membership Portal</a></li>
  <li><a href="https://owasp.org/news/">Opinions & News</a></li>
  <li><a href="https://owasp.org/www-policy/">Policies</a></li>
  <li><a href="https://owasp.org/corporate/">Staff</a></li>
  <li><a href="https://www.youtube.com/user/OWASPGLOBAL/videos">Video</a></li>
</ul>
```

--------------------------------

### OWASP About and Support Navigation

Source: https://owasp.org/www-project-top-ten/2017/de/A7_2017-Cross-Site_Scripting_%28XSS%29

Provides links to information about OWASP, including its mission, governance, staff, and ways to support the organization through donations and membership.

```markdown
* [About OWASP](https://owasp.org/about/)
* [Awards](https://owasp.org/awards/)
* [Careers](https://owasp.org/careers/)
* [Committees](https://owasp.org/committees/)
* [Contact Us](https://owasp.org/contact/)
* [Corporate Supporters](https://owasp.org/supporters/)
* [Donate](https://owasp.org/donate/)
* [Finance](https://owasp.org/finance/)
* [Global Board](https://owasp.org/www-board/)
* [Global Board EU](https://owasp.org/www-board-eu/)
* [Governance](https://owasp.org/governance/)
* [Membership Portal](https://owasp.glueup.com)
* [Opinions & News](https://owasp.org/news/)
* [Policies](https://owasp.org/www-policy/)
* [Staff](https://owasp.org/corporate/)
* [Video](https://www.youtube.com/user/OWASPGLOBAL/videos)
* [MAKE A DONATION](https://owasp.org/donate)
* [BECOME A MEMBER](https://owasp.org/membership)
* [SITEMAP](https://owasp.org/sitemap)
```

--------------------------------

### OWASP Chapters

Source: https://owasp.org/www-project-top-ten/2017/de/A5_2017-Fehler_in_der_Zugriffskontrolle

Links to OWASP chapters worldwide, with options to find a local chapter or start a new one.

```text
* [Find a Local Chapter...](https://owasp.org/chapters/)
* [Start a Local Chapter...](https://owasporg.atlassian.net/servicedesk/customer/portal/8/group/20/create/90?src=-1419759666)
```

--------------------------------

### OWASP About Section Links

Source: https://owasp.org/www-project-top-ten/2017/de/Naechste_Schritte_fuer_Sicherheitstester

Provides links to information about OWASP, including its mission, governance, and ways to get involved.

```markdown
* [About OWASP](https://owasp.org/about/)
* [Awards](https://owasp.org/awards/)
* [Careers](https://owasp.org/careers/)
* [Committees](https://owasp.org/committees/)
* [Contact Us](https://owasp.org/contact/)
* [Corporate Supporters](https://owasp.org/supporters/)
* [Donate](https://owasp.org/donate/)
* [Finance](https://owasp.org/finance/)
* [Global Board](https://owasp.org/www-board/)
* [Global Board EU](https://owasp.org/www-board-eu/)
* [Governance](https://owasp.org/governance/)
* [Membership Portal](https://owasp.glueup.com)
* [Opinions & News](https://owasp.org/news/)
* [Policies](https://owasp.org/www-policy/)
* [Staff](https://owasp.org/corporate/)
* [Video](https://www.youtube.com/user/OWASPGLOBAL/videos)
```

--------------------------------

### OWASP Project References

Source: https://owasp.org/www-project-top-ten/2017/A9_2017-Using_Components_with_Known_Vulnerabilities

Links to various OWASP projects and resources related to application security, including the Application Security Verification Standard, Dependency Check, Testing Guide, and Virtual Patching Best Practices.

```en
OWASP Application Security Verification Standard: V1 Architecture, design and threat modelling: https://owasp.org/www-project-application-security-verification-standard
OWASP Dependency Check (for Java and .NET libraries): https://owasp.org/www-project-dependency-check
OWASP Testing Guide - Map Application Architecture (OTG-INFO-010): https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/01-Information_Gathering/10-Map_Application_Architecture
OWASP Virtual Patching Best Practices: https://owasp.org/www-community/Virtual_Patching_Best_Practices
```

--------------------------------

### OWASP About Navigation

Source: https://owasp.org/www-project-top-ten/2017/de/Top_10

Links to information about OWASP, including its mission, governance, corporate structure, and ways to get involved.

```markdown
* [About OWASP](https://owasp.org/about/)
* [Awards](https://owasp.org/awards/)
* [Careers](https://owasp.org/careers/)
* [Committees](https://owasp.org/committees/)
* [Contact Us](https://owasp.org/contact/)
* [Corporate Supporters](https://owasp.org/supporters/)
* [Donate](https://owasp.org/donate/)
* [Finance](https://owasp.org/finance/)
* [Global Board](https://owasp.org/www-board/)
* [Global Board EU](https://owasp.org/www-board-eu/)
* [Governance](https://owasp.org/governance/)
* [Membership Portal](https://owasp.glueup.com)
* [Opinions & News](https://owasp.org/news/)
* [Policies](https://owasp.org/www-policy/)
* [Staff](https://owasp.org/corporate/)
* [Video](https://www.youtube.com/user/OWASPGLOBAL/videos)
```

--------------------------------

### OWASP Support and Membership Links

Source: https://owasp.org/www-project-top-ten/2017/de/Neuerungen

Links for supporting OWASP through donations and joining as a member.

```markdown
[](https://owasp.org/store) [Donate](https://owasp.org/donate?reponame=www-project-top-ten&title=Neuerungen) [Join](https://owasp.org/membership)
```

--------------------------------

### OWASP About Navigation

Source: https://owasp.org/www-project-top-ten/2017/A2_2017-Broken_Authentication

Provides links to information about OWASP, including its mission, governance, staff, and ways to get involved.

```markdown
* [About OWASP](https://owasp.org/about/)
* [Awards](https://owasp.org/awards/)
* [Careers](https://owasp.org/careers/)
* [Committees](https://owasp.org/committees/)
* [Contact Us](https://owasp.org/contact/)
* [Corporate Supporters](https://owasp.org/supporters/)
* [Donate](https://owasp.org/donate/)
* [Finance](https://owasp.org/finance/)
* [Global Board](https://owasp.org/www-board/)
* [Global Board EU](https://owasp.org/www-board-eu/)
* [Governance](https://owasp.org/governance/)
* [Membership Portal](https://owasp.glueup.com)
* [Opinions & News](https://owasp.org/news/)
* [Policies](https://owasp.org/www-policy/)
* [Staff](https://owasp.org/corporate/)
* [Video](https://www.youtube.com/user/OWASPGLOBAL/videos)
```
Tokens:
Raw