OWASP Testing Guide
The Open Web Application Security Project (OWASP) is a community-driven security organization. OWASP is a leading authority in security, with a particular focus on web application security. It produces many forms of content to assist the overall community in learning, awareness, and enhancing security. Some examples of its content include Metasploitable, Web Goat, Juice Shop, Top Ten, and SamuraiWTF.
The OWASP Testing Guide is a specific CySA+ exam objective, which provides testing guidance specific to web applications. The guide, much like most of the OWASP content, is driven by community involvement, allowing it to be up to date and comprehensive with regular updates. It encourages testing at every phase of the software development life cycle (SDLC), with a philosophy of testing early and often where possible through automation. It includes testing for people, processes, and technologies, much like the OSS TMM.
The testing is done through four main techniques...
