owasp-top-10-testing

See which OWASP risks your application can actually prove.

application security

What it does

Tests an application category by category and reports the OWASP risks that are actually exploitable.

When to use it

Use for an OWASP Top 10 assessment, compliance test, or security review mapped to OWASP categories.

Give it an application target; it tests the target and returns category-by-category findings, coverage gaps, and verified proofs of concept.

What you provide

This skill

target application

Write

Sends exploit probes to your app

The workflow invokes the strix command-line tool.

Two user accounts plus a privileged account are needed to prove the authorization portion of A01.

A running instance, together with source, enables maximum category coverage.

Routes OWASP API Security Top 10 assessments to this skill.