Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Added Test Cases for 'Vulnerability Testing' #24 #48

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Added Test Cases for 'Vulnerability Testing' #24 #48

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions Cases-Collection/Vulnerability Testing.csv
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
S.No,Test Case,Type of Test Case (Positive / Negative),Remarks
1,Verify if the product fits for latest CVEs,Negative,
2,Verify that the API has proper rate limitings,Negative,
3,Verify the user entry for special characters,Negative,
4,Verify the product has proper sessions,Negative,
5,Verify that the product uses CAPTCHA as and when required,Positive,
6,Verify the endpoints for Open Redirection,Negative,
7,Verify the user inputs for IDOR,Negative,
8,Verify that the product is not vulnerable to CSRF and/or SSRF,Negative,
9,Verify that the product is not vulnerable to Host Header Injection,Negative,
10,Verify that the product is not vulnerable to Local / Remote File Inclusion vulnerability,Negative,
11,Verify that the product is not vulnerable to SMTP Injection,Negative,
12,Verify that the product is not vulnerable to SQL Injection,Negative,
13,Verify that the product is not vulnerable to Subdomain Takeover,Negative,
14,Verify that the product is not vulnerable to XSS,Negative,
15,"Verify that the product is not vulnerable to PHP Object Injection, File Deletion, and Arbitrary File Upload",Negative,
16,Verify that the product is not sending data over unencrypted networks,Negative,
17,Verify that the product is not vulnerable to Unauthenticated Cache Purge,Negative,
18,Verify that the product is not vulnerable to HTML Injection,Negative,
19,Verify that the product is not vulnerable to Application level DOS,Negative,
20,Verify that the product is not vulnerable to Parameter Pollution,Negative,