# Authentication/session management

- [OWASP WSTG-SESS-10 ~ JSON Web Token (JWT)](/penetration-testing-ethical-hacking-concepts/web-exploitation/authentication-session-management/json-web-token-jwt.md)
- [OWASP WSTG-ATHZ-05 ~ OAuth weaknesses](/penetration-testing-ethical-hacking-concepts/web-exploitation/authentication-session-management/oauth-weaknesses.md)
