Skip to main content

Posts

Showing posts from January 11, 2025

OWASP TOP 10- OVERVIEW

  The OWASP Top 10 (Open Web Application Security Project) is a regularly updated list of the most critical security risks to web applications. The 2021 version of the OWASP Top 10 provides insights into common vulnerabilities, their impact, and recommendations for remediation. Here's a detailed overview: 1. Broken Access Control (A01:2021) Description : When access controls are improperly implemented, users may be able to access restricted resources or perform actions they shouldn't be allowed to. Impact : Attackers can bypass authorization, leading to data breaches or privilege escalation. Examples : Modifying URL or API parameters to access unauthorized data. Accessing an admin page without proper credentials. Mitigations : Implement proper role-based access controls (RBAC). Test all access control mechanisms extensively. 2. Cryptographic Failures (A02:2021) Description : Issues related to protecting sensitive data at rest or in transit due to weak or misconfigured cryptogr...