This content represents the latest contributions to the Web Security Testing Guide, and may frequently change.

Store Donate Join

This website uses cookies to analyze our traffic and only share that information with our analytics partners.

x

WSTG - Latest

Home > Latest > 4-Web Application Security Testing > 09-Weak Cryptography

4.9 Weak Cryptography

4.9.1 Weak Transport Layer Security

4.9.2 Padding Oracle

4.9.3 Sensitive Information Sent via Unencrypted Channels

4.9.4 Weak Cryptographic Primitives

Watch Star

The OWASP^® Foundation works to improve the security of software through its community-led open source software projects, hundreds of chapters worldwide, tens of thousands of members, and by hosting local and global conferences.

WSTG Contents

Filter contents

0. Foreword
1. About
2. Introduction
3. The OWASP Testing Framework
4. Web Application Security Testing
5. Reporting
- 5.1 Reporting Structure
- 5.2 Naming Schemes
Appendix A. History
Appendix B. Testing Tools Resource
Appendix C. Suggested Reading
Appendix D. Fuzzing
Appendix E. Encoded Injection
Appendix F. Leveraging Dev Tools

Upcoming OWASP Global Events

Corporate Supporters

Become a corporate supporter

HOME
PROJECTS
CHAPTERS
EVENTS
ABOUT
PRIVACY
SITEMAP
CONTACT

OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc. Unless otherwise specified, all content on the site is Creative Commons Attribution-ShareAlike v4.0 and provided without warranty of service or accuracy. For more information, please refer to our General Disclaimer. OWASP does not endorse or recommend commercial products or services, allowing our community to remain vendor neutral with the collective wisdom of the best minds in software security worldwide. Copyright 2026, OWASP Foundation, Inc.