Ravi Sir's Cyber Security Cards › Revision Cards
What OWASP and the Top 10 Are
What OWASP and the Top 10 Are OWASP (Open Worldwide Application Security Project) is a non-profit that publishes free security guidance. The OWASP Top 10 is the list of the ten most critical web app risks, updated every few years (current list: 2021). It is not for memorising word-for-word. Use it a
Read card text
What this card says
What it is
OWASP (Open Worldwide Application Security Project) is a non-profit that publishes free security guidance.
The Top 10
The OWASP Top 10 is the list of the ten most critical web app risks, updated every few years (current list: 2021).
Why it matters for security
It is not for memorising word-for-word.
Use it as a checklist of what to test and fix in a web app.
| # | Category |
|---|---|
| A01 | Broken Access Control |
| A02 | Cryptographic Failures |
| A03 | Injection (SQLi, command injection, XSS) |
| A04 | Insecure Design |
| A05 | Security Misconfiguration |
Learn more in the lesson: 29.1 What OWASP and the Top 10 Are