# OWASP Top 10 - Interactive Cheat Sheets & Quick Reference Cards

Welcome to the OWASP Top 10 Cheat Sheets collection! These quick reference cards provide one-page visual summaries of each vulnerability, designed for printing and keeping at your desk or viewing on-screen.

## 📋 Available Cheat Sheets

### OWASP Web Application Security Risks
1. [Broken Access Control](web/01-broken-access-control.html)
2. [Cryptographic Failures](web/02-cryptographic-failures.html)
3. [Injection](web/03-injection.html)
4. [Insecure Design](web/04-insecure-design.html)
5. [Security Misconfiguration](web/05-security-misconfiguration.html)
6. [Vulnerable and Outdated Components](web/06-vulnerable-outdated-components.html)
7. [Identification and Authentication Failures](web/07-identification-authentication-failures.html)
8. [Software and Data Integrity Failures](web/08-software-data-integrity-failures.html)
9. [Security Logging and Monitoring Failures](web/09-security-logging-monitoring-failures.html)
10. [Server-Side Request Forgery (SSRF)](web/10-server-side-request-forgery.html)

### OWASP API Security Top 10
1. [Broken Object Level Authorization](api/api01-broken-object-level-authorization.html)
2. [Broken Authentication](api/api02-broken-authentication.html)
3. [Broken Object Property Level Authorization](api/api03-broken-object-property-level-authorization.html)
4. [Unrestricted Resource Consumption](api/api04-unrestricted-resource-consumption.html)
5. [Broken Function Level Authorization](api/api05-broken-function-level-authorization.html)
6. [Unrestricted Access to Sensitive Business Flows](api/api06-unrestricted-access-sensitive-flows.html)
7. [Server-Side Request Forgery](api/api07-server-side-request-forgery.html)
8. [Security Misconfiguration](api/api08-security-misconfiguration.html)
9. [Improper Inventory Management](api/api09-improper-inventory-management.html)
10. [Unsafe Consumption of APIs](api/api10-unsafe-consumption-apis.html)

### OWASP LLM Top 10
1. [Prompt Injection](llm/llm01-prompt-injection.html)
2. [Insecure Output Handling](llm/llm02-insecure-output-handling.html)
3. [Training Data Poisoning](llm/llm03-training-data-poisoning.html)
4. [Model Denial of Service](llm/llm04-model-denial-of-service.html)
5. [Supply Chain Vulnerabilities](llm/llm05-supply-chain-vulnerabilities.html)
6. [Sensitive Information Disclosure](llm/llm06-sensitive-information-disclosure.html)
7. [Insecure Plugin Design](llm/llm07-insecure-plugin-design.html)
8. [Excessive Agency](llm/llm08-excessive-agency.html)
9. [Overreliance](llm/llm09-overreliance.html)
10. [Model Theft](llm/llm10-model-theft.html)

### OWASP Mobile Top 10
1. [Improper Credential Usage](mobile/m01-improper-credential-usage.html)
2. [Inadequate Supply Chain Security](mobile/m02-inadequate-supply-chain-security.html)
3. [Insecure Authentication/Authorization](mobile/m03-insecure-authentication-authorization.html)
4. [Insufficient Input/Output Validation](mobile/m04-insufficient-input-output-validation.html)
5. [Insecure Communication](mobile/m05-insecure-communication.html)
6. [Inadequate Privacy Controls](mobile/m06-inadequate-privacy-controls.html)
7. [Insufficient Binary Protections](mobile/m07-insufficient-binary-protections.html)
8. [Security Misconfiguration](mobile/m08-security-misconfiguration.html)
9. [Insecure Data Storage](mobile/m09-insecure-data-storage.html)
10. [Insufficient Cryptography](mobile/m10-insufficient-cryptography.html)

## 📥 Download Options

Each cheat sheet is available in multiple formats:
- **HTML** - Interactive, with syntax highlighting
- **PDF** - Print-ready, high quality (use browser's Print to PDF)
- **PNG** - Image format for presentations (screenshot or use conversion tools)

## 🎨 Features

Each cheat sheet includes:

- ✅ **One-page visual summary** - All key information at a glance
- ✅ **Common exploit patterns** - Quick reference for attack vectors
- ✅ **Prevention checklist** - Step-by-step security measures
- ✅ **Code snippet examples** - Both vulnerable and secure code
- ✅ **Visual diagrams** - Attack flows and architecture
- ✅ **Quick statistics** - Prevalence and impact data
- ✅ **Tool recommendations** - Detection and prevention tools

## 🖨️ How to Print

### For Best Print Quality:

1. Open the HTML cheat sheet in your browser
2. Use **Print** (Ctrl+P / Cmd+P)
3. Select **"Save as PDF"** as destination
4. Settings:
   - Layout: Portrait
   - Paper size: Letter or A4
   - Margins: Default
   - Background graphics: ON (important!)
5. Save and print

### Tips:
- Print on **heavy stock paper** for durability
- Consider **laminating** for desk reference
- Print in **color** for better visual distinction
- Use **double-sided** printing to save paper

## 📱 Mobile-Friendly

All cheat sheets are responsive and work great on:
- Desktop computers
- Tablets
- Smartphones
- E-readers

## 🔄 Updates

Cheat sheets are updated to reflect:
- Latest OWASP standards
- New attack techniques
- Updated prevention methods
- Community feedback

Check `CHANGELOG.md` for version history.

## 🤝 Contributing

Want to improve a cheat sheet?
- Report issues via [GitHub Issues](https://github.com/0x6a03448f4d/OWASP-TOP10/issues)
- Submit improvements via [Pull Requests](https://github.com/0x6a03448f4d/OWASP-TOP10/pulls)
- See [CONTRIBUTING.md](../CONTRIBUTING.md) for guidelines

## 📚 Related Resources

- [Main Repository README](../README.md)
- [Interactive Labs](../labs/)
- [CTF Challenges Hub](../ctf-hub/)
- [Quiz Platform](../quiz-platform/)
- [Interactive Diagrams](../diagrams/)
- [Compliance Mappings](../compliance-mappings/)

## 📄 License

These cheat sheets are part of the OWASP-TOP10 repository and licensed under the MIT License.

---

**Pro Tip**: Keep a printed set of these cheat sheets near your workspace for quick security reference during code reviews! 🛡️