Web App Penetration Testing Process/Checklist

Can anyone recommend a good process or checklist for web app testing? I know plenty of tools, but it would be great to have a process or checklist to follow. Thanks!

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

I found a few good sources, in case anyone is interested:

https://www.owasp.org/index.php/Web_Application_Security_Testing_****_Sheet
https://www.softwaretestingclass.com/complete-checklist-for-website-testing
https://screenster.io/manual-testing-checklist

There are others. I'm building my own process and checklist from this.

https://software-security.sans.org/resources/swat

xXxKrisxXx said:

https://software-security.sans.org/resources/swat

Perfect, thanks!

I just found this: https://jdow.io/blog/2018/03/18/web-application-penetration-testing-methodology/

Excellent resource!

Quick Links