5 Authorization Testing

5.1 Testing Directory Traversal File Include

5.2 Testing for Bypassing Authorization Schema

5.3 Testing for Privilege Escalation

5.4 Testing for Insecure Direct Object References

5.5 Testing for OAuth Weaknesses

5.5.1 Testing for OAuth Authorization Server Weaknesses

5.5.2 Testing for OAuth Client Weaknesses