80-443

443

-Check the TLS cert for additional info (emails, domains)

80/443

-Check all pages and source code

XSS

Anytime you see user input in an HTTP request (burp) that is then being reflected on the webpage, test for XSS

File Upload Vulns

1. Need the ability to upload “unsafe” file types. PDF, PHP, JPEG, etc.

2. Need to then be able to find the file/navigate to the file and execute

Subdomain

GoBuster

WPSCAN

LFI Vuln

Command Injection

Hydra