Web Vulnerability Detection (Web Vulnerability)
Applicable Scenarios
- OWASP Top 10 Detection
- XSS / SQL Injection / SSRF / CSRF
- File Upload Vulnerability
- Information Disclosure
- Misconfiguration
OWASP Top 10 (2021) Quick Reference
| # |
Category |
Example |
Detection Method |
| A01 |
Broken Access Control |
IDOR / Privilege Escalation |
Manual + Automated |
| A02 |
Cryptographic Failures |
Plaintext Transmission / Weak Encryption |
Scanning + Review |
| A03 |
Injection |
SQLi / XSS / SSRF |
DAST + Manual |
| A04 |
Insecure Design |
Business Logic Flaws |
Threat Modeling |
| A05 |
Security Misconfiguration |
Default Passwords / Debugging Enabled |
Scanning |
| A06 |
Vulnerable Components |
Known Vulnerable Dependencies |
SCA Scanning |
| A07 |
Auth Failures |
Weak Passwords / Unlimited Retries |
Manual |
| A08 |
Data Integrity Failures |
Insecure Deserialization |
Review |
| A09 |
Logging Failures |
Incomplete / Leaked Logs |
Review |
| A10 |
SSRF |
Internal Network Probing |
Manual + DAST |
Detection Tools
| Tool |
Type |
Purpose |
| Burp Suite |
Proxy |
Manual + Semi-automated |
| OWASP ZAP |
DAST |
Automated Scanning |
| Nuclei |
Template Scanning |
Known Vulnerabilities |
| sqlmap |
Automation |
SQL Injection |
| XSStrike |
Automation |
XSS |
| ffuf |
Brute Force |
Directories / Parameters |
Supporting Templates
templates/vulnerability-report-template.md — Vulnerability Report Template
Quality Self-check
□ OWASP Top 10 全覆盖
□ 手动 + 自动结合
□ 每个发现有复现步骤
□ 每个发现有风险等级
□ 每个发现有修复建议
□ 不只跑工具
Common Pitfalls
- Only running ZAP without manual testing——Misses business logic
- Not testing IDOR——Most common high-risk issue
- Not testing SSRF——Internal network probing
- Not testing file upload——RCE risk
- Report lacks reproduction steps——Developers cannot fix
Collaboration with other skills
上游：
threat-modeling → 重点测试区域
下游：
security-report → 发现纳入报告
reverse-pentest → 需要深度利用时
