Web App Penetration Testing Process/Checklist

Can anyone recommend a good process or checklist for web app testing? I know plenty of tools, but it would be great to have a process or checklist to follow. Thanks!

Find more posts tagged with

SAVE $250 on Your Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View Boot Camps

Comments

tedjames

I found a few good sources, in case anyone is interested:

https://www.owasp.org/index.php/Web_Application_Security_Testing_****_Sheet
https://www.softwaretestingclass.com/complete-checklist-for-website-testing
https://screenster.io/manual-testing-checklist

There are others. I'm building my own process and checklist from this.

xXxKrisxXx

https://software-security.sans.org/resources/swat

tedjames

xXxKrisxXx said:

https://software-security.sans.org/resources/swat

Perfect, thanks!

tedjames

I just found this: https://jdow.io/blog/2018/03/18/web-application-penetration-testing-methodology/

Excellent resource!