• Recon Phase
• Registration Feature Testing
• Session Management Testing
• Authentication Testing
• Registration
• My Account (Post Login) Testing
• Forgot Password Testing
• Error Handling
• Contact Us Form Testing
• Product Purchase Testing
• Open Redirection Testing
• Host Header Injection
• SQL Injection Testing
• Cross-Site Scripting Testing
• CSRF Testing
• SSO Vulnerabilities
• XML Injection Testing
• Cross-origin resource sharing (CORS)
• Server-side request forgery (SSRF)
• File Upload Testing