Identify application exit/handover points (OTG-INFO-007)

From OWASP
Revision as of 08:42, 28 July 2013 by Andrew Muller (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search
This article is part of the new OWASP Testing Guide v4. 
At the moment the project is in the REVIEW phase.

Back to the OWASP Testing Guide v4 ToC: https://www.owasp.org/index.php/OWASP_Testing_Guide_v4_Table_of_Contents Back to the OWASP Testing Guide Project: http://www.owasp.org/index.php/OWASP_Testing_Project

Contents


Summary

Some applications defer functionality to other existing applications. A common example of this is the payment gateway. Many application owners don't wish to incur the cost and hassle of maintaining their own application payment gateway, so they leverage existing payment gateway providers to handle payments for their applications.

Test Objectives

The objectives of this test case are:

  • to clarify the scope of the test, and
  • to understand the state/circumstances of normal termination of the application, and
  • to observe what parameters and information is exchanged during the application handover.

How to Test

Black Box testing and example


Gray Box testing and example


Tools

  • Wget
  • Httprint

References

Whitepapers [1] http://net-square.com/httprint.html HTTPrint download page

Remediation