Skip to content

Commit

Permalink
Add files via upload
Browse files Browse the repository at this point in the history
  • Loading branch information
Anof-cyber authored Apr 9, 2022
1 parent f3f626e commit be5ba4e
Showing 1 changed file with 52 additions and 0 deletions.
52 changes: 52 additions & 0 deletions Checklist.CSV
Original file line number Diff line number Diff line change
@@ -0,0 +1,52 @@
1,Parameter Tampering
2,SQL Injection
3,Reflected Cross Site Scripting
4,IDOR
5,Privledge Esclation
6,Code Tapering
7,DOM Cross Site Scripting
8,Stored Cross Site Scripting
9,Rate Liming
10,CORS
11,Verbose Error
12,Options Method Enabled
13,Forced Browsing
14,Missing HSTS Header
15,Missing X-Frame Header
16,OTP Bypass with Response Modification
17,Directory Listing Enabled
18,Hard-Coded Sensitive Information
19,SSL not Enabled
20,SSL not Enforced
21,Weak Password Policy
22,Cookie without Secure Flag
23,Cookie without HTTP Only Flag
24,ormation in URL
25,User Enumeration
26,Long Password DOS
27,Insufficient Account Verification
28,Open Redirect
29,2FA Bypass
30,CSRF
31,Insufficient Session Expiry after Logout
32,Insufficient Session Expiry after Password Change/Forget password/Edit profile/Delete profile/
33,Command Injection
34,Local Storage not Cleaned
35,Host Header Injection
36,OTP Valid for more than one time
37,Password Reset Link is not expired
38,Password Reset Link Poision
39,Password Reset Token is predictable
40,File Path Traversal
41,LFI
42,RFI
43,SSRF
44,XPath Injection
45,No SQL Injection
46,HTTP Request Smuggling
47,XMLPRC Enabled
48,DEBUG Method Enabled
49,View State Not Encrypted
50,Captcha Bypass
51,Price Manupulation
52,Internal IP Disclosed

0 comments on commit be5ba4e

Please sign in to comment.