appsec.fyi · Sources

cheatsheetseries.owasp.org

18 curated AppSec resources from cheatsheetseries.owasp.org across 12 topics on appsec.fyi.

cheatsheetseries.owasp.org

Resources curated from this publisher and indexed across appsec.fyi topic pages. Last item added: 2026-04-17.

AuthN 4 AuthZ 3 SSRF 2 AI 1 API Sec 1 CSRF 1 Deser 1 GraphQL 1 IDOR 1 JWT 1 Secrets 1 XXE 1
Date Added Resource Excerpt
2026-04-17 2026SAML Security (OWASP Cheat Sheet)AuthNSAML Security (OWASP Cheat Sheet)
2026-04-11 2026Authorization Testing Automation Cheat Sheet - OWASPAuthZAuthorization Testing Automation Cheat Sheet - OWASP
2026-04-11 2026Access Control Cheat Sheet - OWASPAuthZAccess Control Cheat Sheet - OWASP
2026-04-11 2026Authorization Cheat Sheet - OWASPAuthZAuthorization Cheat Sheet - OWASP
2026-04-11 2026OWASP Credential Stuffing Prevention Cheat SheetAuthNOWASP Credential Stuffing Prevention Cheat Sheet
2026-04-11 2026OWASP LLM Prompt Injection Prevention Cheat SheetAIOWASP LLM Prompt Injection Prevention Cheat Sheet
2026-04-10 2026OWASP Session Management Cheat SheetAuthNOWASP Session Management Cheat Sheet
2026-04-10 2026OWASP Authentication Cheat SheetAuthNOWASP Authentication Cheat Sheet
2026-04-10 2026OWASP JSON Web Token for Java Cheat SheetJWTOWASP JSON Web Token for Java Cheat Sheet
2026-04-10 2026IDOR Prevention Cheat SheetIDORIDOR Prevention Cheat Sheet
2026-04-10 2026OWASP Deserialization Cheat SheetDeserOWASP Deserialization Cheat Sheet
2026-04-03 2026Cross-Site Request Forgery Prevention Cheat Sheet | OWASPCSRFCross-Site Request Forgery Prevention Cheat Sheet | OWASP
2026-04-03 2026GraphQL Cheat Sheet | OWASPGraphQLGraphQL Cheat Sheet | OWASP
2026-04-03 2026Secrets Management - OWASP Cheat Sheet SeriesSecretsWebsite with the collection of all the cheat sheets of the project.
2025-08-14 2025XML External Entity Prevention ยท OWASP Cheat Sheet SeriesXXEThe content is about preventing XML External Entity (XXE) attacks, which is part of the OWASP Cheat Sheet Series. XXE attacks exploit vulnerabilities in XML processors by injecting malicious content. Preventing XXE attacks is crucial to protect against data theft and server compromise. The OWASP Cheat Sheet Series provides guidelines and best practices to mitigate XXE vulnerabilities and secure XML processing. It emphasizes the importance of validating input, disabling external entity references, and using secure XML parsers to prevent XXE attacks.
2025-08-14 2025Server_Side_Request_Forgery_Prevention_Cheat_Sheet_SSRF_Bible.pdfSSRFThe content is a document titled "Server_Side_Request_Forgery_Prevention_Cheat_Sheet_SSRF_Bible.pdf." It likely contains information and guidelines on preventing server-side request forgery (SSRF) attacks. SSRF is a vulnerability where an attacker can manipulate a server into making unintended requests on their behalf. The document may provide cheat sheets or best practices to help developers protect their systems from SSRF attacks. It could be a valuable resource for understanding and mitigating this security risk.
2025-08-14 2025Server Side Request Forgery Prevention - OWASP Cheat Sheet SeriesSSRFThe content is about preventing Server Side Request Forgery (SSRF) and is part of the OWASP Cheat Sheet Series. SSRF is a vulnerability where an attacker can manipulate a server into making unintended requests, potentially accessing internal systems or sensitive data. The OWASP Cheat Sheet provides guidance on how to prevent SSRF attacks, which typically involve validating and sanitizing user input, restricting access to sensitive resources, and using whitelists to control allowed URLs. It is crucial for developers and security professionals to be aware of SSRF risks and implement preventive measures to secure their systems.
2021-10-25 2021HTTP HeadersAPI SecHTTP Headers