Penetration Testing
- SQL Injection
- Broken Authentication and Session Management
- Cross-Site Scripting (XSS)
- Insecure Direct Object References
- Security Misconfiguration
- Missing Function Level Access Control
- Cross-Site Request Forgery (CSRF)
- Invalidated Redirects and Forwards