@@ -31,7 +31,7 @@ tags: WSTG
 In terms of technical security testing execution, the OWASP testing guides are highly recommended. Depending on the types of the applications, the testing guides are listed below for the web/cloud services, Mobile app (Android/iOS), or IoT firmware respectively.
 
 - [OWASP Web Security Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
-- [OWASP Mobile Security Testing Guide](https://owasp.org/www-project-mobile-security-testing-guide/)
+- [OWASP Mobile Security Testing Guide](https://mas.owasp.org/)
 - [OWASP Firmware Security Testing Methodology](https://github.com/scriptingxss/owasp-fstm)
 
 ## Penetration Testing Execution Standard
@@ -137,6 +137,6 @@ OSSTMM includes the following key sections:
 - [Technical Guide to Information Security Testing and Assessment NIST SP 800-115](https://csrc.nist.gov/publications/detail/sp/800-115/final)
 - [HIPAA Security Testing Guidance](https://www.hhs.gov/hipaa/for-professionals/security/guidance/cybersecurity/index.html)
 - [Penetration Testing Framework 0.59 (Archived)](https://web.archive.org/web/20130925044437/http://www.vulnerabilityassessment.co.uk/Penetration%20Test.html)
-- [OWASP Mobile Security Testing Guide](https://owasp.org/www-project-mobile-security-testing-guide/)
+- [OWASP Mobile Security Testing Guide](https://mas.owasp.org/)
 - [Kali Linux](https://www.kali.org/)
 - [Information Supplement: Requirement 11.3 Penetration Testing](https://www.pcisecuritystandards.org/pdfs/infosupp_11_3_penetration_testing.pdf)
@@ -50,7 +50,7 @@ Do not limit testing to just one search engine provider, as different search eng
 - [DuckDuckGo](https://duckduckgo.com/), a privacy-focused search engine that compiles results from many different [sources](https://help.duckduckgo.com/results/sources/). Supports [search syntax](https://help.duckduckgo.com/duckduckgo-help-pages/results/syntax/).
 - [Google](https://www.google.com/), which offers the world's [most popular](https://en.wikipedia.org/wiki/Web_search_engine#Market_share) search engine, and uses a ranking system to attempt to return the most relevant results. Supports [search operators](https://support.google.com/websearch/answer/2466433).
 - [Internet Archive Wayback Machine](https://archive.org/web/), "building a digital library of internet sites and other cultural artifacts in digital form."
-- [Censys](https://censys.io) is a security-focused search engine that indexes internet-connected infrastructure including servers, certificates,and open services. It offers a free community tier with limited monthly credits and paid plans for enterprise use.
+- [Censys](https://censys.com) is a security-focused search engine that indexes internet-connected infrastructure including servers, certificates,and open services. It offers a free community tier with limited monthly credits and paid plans for enterprise use.
 - [Shodan](https://www.shodan.io/), a service for searching internet-connected devices and services. Usage options include a limited free plan as well as paid subscription plans.
 
 ### Search Operators
 
@@ -57,7 +57,7 @@ Disallow: /m/
 Sitemap: https://www.google.com/sitemap.xml
 ```
 
-The [User-Agent](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/User-Agent) directive refers to the specific web spider/robot/crawler. For example, the `User-Agent: Googlebot` refers to the spider from Google while `User-Agent: bingbot` refers to a crawler from Microsoft. `User-Agent: *` in the example above applies to all [web spiders/robots/crawlers](https://support.google.com/webmasters/answer/6062608?visit_id=637173940975499736-3548411022&rd=1).
+The [User-Agent](https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/User-Agent) directive refers to the specific web spider/robot/crawler. For example, the `User-Agent: Googlebot` refers to the spider from Google while `User-Agent: bingbot` refers to a crawler from Microsoft. `User-Agent: *` in the example above applies to all [web spiders/robots/crawlers](https://developers.google.com/search/docs/crawling-indexing/robots/intro).
 
 The `Disallow` directive specifies which resources are prohibited by spiders/robots/crawlers. In the example above, the following are prohibited:
 
@@ -91,7 +91,7 @@ From a testing perspective, `robots.txt` entries intended to block AI crawlers (
 
 #### Analyze robots.txt Using Google Webmaster Tools
 
-Site owners can use the Google "Analyze robots.txt" function to analyze the site as part of its [Google Webmaster Tools](https://www.google.com/webmasters/tools). This tool can assist with testing and the procedure is as follows:
+Site owners can use the Google "Analyze robots.txt" function to analyze the site as part of its [Google Webmaster Tools](https://search.google.com/search-console/about). This tool can assist with testing and the procedure is as follows:
 
 1. Sign into Google Webmaster Tools with a Google account.
 2. On the dashboard, enter the URL for the site to be analyzed.
 
@@ -259,7 +259,7 @@ Reverse-IP services are similar to DNS inverse queries, with the difference that
 - [MxToolbox Reverse IP](https://mxtoolbox.com/ReverseLookup.aspx)
 - [DNSstuff](https://www.dnsstuff.com/) (multiple services available)
 
-Internet asset search engines such as [Shodan](https://www.shodan.io/), [Censys](https://censys.io), and [FOFA](https://fofa.info) index internet-connected hosts and services and can also be searched by IP, certificate, or banner content to reveal other hostnames and services hosted on the same address. FOFA in particular has extensive coverage of infrastructure in China and Asia-Pacific, which can complement the coverage of Shodan and Censys. For example, an IP-based FOFA search: `ip="192.168.1.100"`, or a search for a specific title or header: `title="Example App"`. As with the other reverse-IP services above, a free tier with limited queries is available, with paid plans for more comprehensive access.
+Internet asset search engines such as [Shodan](https://www.shodan.io/), [Censys](https://censys.com), and [FOFA](https://fofa.info) index internet-connected hosts and services and can also be searched by IP, certificate, or banner content to reveal other hostnames and services hosted on the same address. FOFA in particular has extensive coverage of infrastructure in China and Asia-Pacific, which can complement the coverage of Shodan and Censys. For example, an IP-based FOFA search: `ip="192.168.1.100"`, or a search for a specific title or header: `title="Example App"`. As with the other reverse-IP services above, a free tier with limited queries is available, with paid plans for more comprehensive access.
 
 #### Googling
 
@@ -351,7 +351,7 @@ Always respect scope, rate limits, and engagement rules of engagement. Validate
 - [MassDNS](https://github.com/blechschmidt/massdns) (high-speed resolver for wordlist / permutation output)
 - Search engines (Google, Bing, and other major search engines)
 - Reverse IP lookup services
-- Internet asset search engines: [Shodan](https://www.shodan.io/), [Censys](https://censys.io), [FOFA](https://fofa.info)
+- Internet asset search engines: [Shodan](https://www.shodan.io/), [Censys](https://censys.com), [FOFA](https://fofa.info)
 - Certificate Transparency search portals: [crt.sh](https://crt.sh), [Merklemap](https://www.merklemap.com/), [SSLMate's Cert Spotter](https://sslmate.com/certspotter/)
 - Archive / historical URL collectors: [gau](https://github.com/lc/gau), [waybackurls](https://github.com/tomnomnom/waybackurls), [waymore](https://github.com/xnl-h4ck3r/waymore)
 - [Nmap](https://nmap.org/)
 
@@ -110,8 +110,8 @@ Applications may provide multiple options for the user to authenticate (such as
 
 Almost all web applications include third party resources that are loaded or that the client interacts with. These can include:
 
-- [Active content](https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content#mixed_active_content) (such as scripts, style sheets, fonts, and iframes)
-- [Passive content](https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content#mixed_passivedisplay_content) (such as images and videos)
+- [Active content](https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Mixed_content#mixed_active_content) (such as scripts, style sheets, fonts, and iframes)
+- [Passive content](https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Mixed_content#mixed_passivedisplay_content) (such as images and videos)
 - External APIs
 - Social media buttons
 - Advertising networks
 
@@ -88,7 +88,7 @@ Some companies choose not to manage all aspects of their web server applications
 - [Prowler](https://github.com/prowler-cloud/prowler) - AWS/Azure/GCP security assessment, including network and firewall rule checks.
 - [kube-bench](https://github.com/aquasecurity/kube-bench) - CIS Kubernetes Benchmark scanner.
 - [kube-hunter](https://github.com/aquasecurity/kube-hunter) - identifies exposed Kubernetes network-facing components.
-- [Shodan](https://www.shodan.io/) / [Censys](https://censys.io/) - internet-wide scan data useful for identifying unintentionally exposed infrastructure during black-box assessments.
+- [Shodan](https://www.shodan.io/) / [Censys](https://censys.com/) - internet-wide scan data useful for identifying unintentionally exposed infrastructure during black-box assessments.
 
 ## References
 
 
@@ -70,7 +70,7 @@ Various tools, documents, or checklists can be used to give IT and security prof
 
 - [CIS-CAT Lite](https://www.cisecurity.org/blog/introducing-cis-cat-lite/)
 - [Microsoft's Attack Surface Analyzer](https://github.com/microsoft/AttackSurfaceAnalyzer)
-- [NIST's National Checklist Program](https://nvd.nist.gov/ncp/repository)
+- [NIST's National Checklist Program](https://ncp.nist.gov/repository)
 
 ### Gray-Box Testing
 
 
@@ -181,7 +181,7 @@ Several tools can assist in identifying hidden administrator interfaces and func
 
 - [ZAP - Forced Browse](https://www.zaproxy.org/docs/desktop/addons/forced-browse/) is a currently maintained use of OWASP's previous DirBuster project.
 - [THC-HYDRA](https://github.com/vanhauser-thc/thc-hydra) is a tool that allows brute-forcing of many interfaces, including form-based HTTP authentication.
-- A brute forcer is much more effective when it uses a good dictionary, such as the [Netsparker](https://www.netsparker.com/blog/web-security/svn-digger-better-lists-for-forced-browsing/) dictionary.
+- A brute forcer is much more effective when it uses a good dictionary, such as the [Netsparker](https://www.invicti.com/blog/web-security/svn-digger-better-lists-for-forced-browsing) dictionary.
 - [nuclei](https://github.com/projectdiscovery/nuclei) with the `exposed-panels` and `default-logins` template sets can fingerprint many of the modern admin/CI/CD/orchestration interfaces described above at scale.
 - [kube-hunter](https://github.com/aquasecurity/kube-hunter) - identifies exposed Kubernetes API server, kubelet, and dashboard endpoints.
 - [SecLists - Default Credentials](https://github.com/danielmiessler/SecLists/tree/master/Passwords/Default-Credentials)
@@ -192,5 +192,5 @@ Several tools can assist in identifying hidden administrator interfaces and func
 - [FuzzDB can be used to do brute force browsing admin login path](https://github.com/fuzzdb-project/fuzzdb/blob/master/discovery/predictable-filepaths/login-file-locations/Logins.txt)
 - [Common admin or debugging parameters](https://github.com/fuzzdb-project/fuzzdb/blob/master/attack/business-logic/CommonDebugParamNames.txt)
 - [Kubernetes Dashboard Security](https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/)
-- [Kong Admin API - Securing the Admin API](https://docs.konghq.com/gateway/latest/production/running-kong/secure-admin-api/)
+- [Kong Admin API - Securing the Admin API](https://developer.konghq.com/gateway/secure-the-admin-api/)
 - [Jenkins: Securing Jenkins](https://www.jenkins.io/doc/book/security/)
@@ -96,5 +96,5 @@ Because preload-list changes ship inside browser releases and are difficult/slow
 - [RFC 6797 - HTTP Strict Transport Security (HSTS)](https://tools.ietf.org/html/rfc6797)
 - [hstspreload.org - Preload List Submission Requirements](https://hstspreload.org/)
 - [Chromium HSTS Preload List Source](https://chromium.googlesource.com/chromium/src/+/main/net/http/transport_security_state_static.json)
-- [MDN: Strict-Transport-Security](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security)
+- [MDN: Strict-Transport-Security](https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Strict-Transport-Security)
 - [Enable HTTP Strict Transport Security In Nginx](https://www.nginx.com/blog/http-strict-transport-security-hsts-and-nginx/)
@@ -106,8 +106,8 @@ Regardless of where secrets live (filesystem, container image, Kubernetes `Secre
 
 ## Tools
 
-- [Windows AccessEnum](https://technet.microsoft.com/en-us/sysinternals/accessenum)
-- [Windows AccessChk](https://technet.microsoft.com/en-us/sysinternals/accesschk)
+- [Windows AccessEnum](https://learn.microsoft.com/en-us/sysinternals/downloads/accessenum)
+- [Windows AccessChk](https://learn.microsoft.com/en-us/sysinternals/downloads/accesschk)
 - [Linux namei](https://linux.die.net/man/1/namei)
 - [dive - Docker image layer/permission explorer](https://github.com/wagoodman/dive)
 - [kube-bench - CIS Kubernetes Benchmark scanner](https://github.com/aquasecurity/kube-bench)