Web application testing checklist

Work top to bottom; each item links to the skill that goes deep. Confirm scope first (tradecraft-scope-roe).

Recon & mapping

• Subdomains + live hosts (recon-subdomain-enum), DNS (recon-dns-analysis)
• Content/endpoint + param discovery (recon-content-discovery), JS mining (recon-js-analysis)
• Fingerprint stack/versions; note WAF/CDN (web-arsenal)

Authentication & session

• Login/registration flaws, username enumeration, rate limiting
• Password reset & email change (web-account-takeover), OTP/2FA bypass
• Session handling & JWT (web-auth-jwt); OAuth/SSO (web-oauth)

Authorization

• IDOR / object-level (web-idor); function-level / forced browsing
• Multi-tenant boundary crossing