Other Test Cases (All Categories)

Testing for Role authorization

• Check if normal users can access the resources of high privileged users?

• Forced browsing

• Insecure direct object reference

• Parameter tampering to switch user account to high privileged user

Blind OS command injection

• using time delays

• by redirecting output

• with out-of-band interaction

• with out-of-band data exfiltration

• Command injection on CSV export (Upload/Download)

• CSV Excel Macro Injection

• If you find a phpinfo.php file, check for the configuration leakage and try to exploit any network vulnerability.

• Parameter Pollution Social Media Sharing Buttons