-
-
Notifications
You must be signed in to change notification settings - Fork 36
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
f3f626e
commit be5ba4e
Showing
1 changed file
with
52 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,52 @@ | ||
1,Parameter Tampering | ||
2,SQL Injection | ||
3,Reflected Cross Site Scripting | ||
4,IDOR | ||
5,Privledge Esclation | ||
6,Code Tapering | ||
7,DOM Cross Site Scripting | ||
8,Stored Cross Site Scripting | ||
9,Rate Liming | ||
10,CORS | ||
11,Verbose Error | ||
12,Options Method Enabled | ||
13,Forced Browsing | ||
14,Missing HSTS Header | ||
15,Missing X-Frame Header | ||
16,OTP Bypass with Response Modification | ||
17,Directory Listing Enabled | ||
18,Hard-Coded Sensitive Information | ||
19,SSL not Enabled | ||
20,SSL not Enforced | ||
21,Weak Password Policy | ||
22,Cookie without Secure Flag | ||
23,Cookie without HTTP Only Flag | ||
24,ormation in URL | ||
25,User Enumeration | ||
26,Long Password DOS | ||
27,Insufficient Account Verification | ||
28,Open Redirect | ||
29,2FA Bypass | ||
30,CSRF | ||
31,Insufficient Session Expiry after Logout | ||
32,Insufficient Session Expiry after Password Change/Forget password/Edit profile/Delete profile/ | ||
33,Command Injection | ||
34,Local Storage not Cleaned | ||
35,Host Header Injection | ||
36,OTP Valid for more than one time | ||
37,Password Reset Link is not expired | ||
38,Password Reset Link Poision | ||
39,Password Reset Token is predictable | ||
40,File Path Traversal | ||
41,LFI | ||
42,RFI | ||
43,SSRF | ||
44,XPath Injection | ||
45,No SQL Injection | ||
46,HTTP Request Smuggling | ||
47,XMLPRC Enabled | ||
48,DEBUG Method Enabled | ||
49,View State Not Encrypted | ||
50,Captcha Bypass | ||
51,Price Manupulation | ||
52,Internal IP Disclosed |