The [Open Web & Application Security Project (OWASP)][1] is an international, open-source, application security project which supports the informed use of security technology via tools and information. [1]: http://www.owasp.org/

learn more… | top users | synonyms

12
votes
2answers
422 views

Detecting website attack attempts

I am currently trying to implement some recommendations from OWASP AppSensor Project and I'd like to respond to attacker, when he tries to break into my website. Is there any resource ...
4
votes
2answers
462 views

Why is this response splitting attack not working?

I'm working through OWASP's "WebGoat" (version 5.4) vulnerable web application, but I'm getting stuck on one of the earliest lessons which is to do with HTTP response splitting. I've looked in all ...
4
votes
2answers
817 views

Canonicalization & Output Encoding

I'm reading OWASP's Secure Coding Practices Checklist and under their "Input Validation" section they have an item that reads: If any potentially hazardous characters (<>"'%()&+\\'\") ...