Web Application Penetration Testing Checklist

A great article that can be used as a checklist for perform web application penetration testing (webapp pentesting). 

Pentesting webapp requires a consistent methodology to perform repeatable tasks such as authentication and authorization checking, input validation checking, session management testing, etc.

Here's a detail cheat sheet for webapp pentesting methodology:

1. Information Gathering
2. Authentication Testing
3. Authorization Testing
4. Configuration Management Testing
5. Session Management Testing
6. Data Validation Testing
7. Denial of Service Testing

Links:

• https://gbhackers.com/web-application-penetration-testing-checklist-a-detailed-cheat-sheet/