Recon Phase
Registration Feature Testing
Session Management Testing
Authentication Testing
OAuth Login Functionality
2FA Misconfiguration
My Account (Post Login)
Forgot Password
Contact Us Form
E‑commerce: Product Purchase
Banking Application
Open Redirection
Host Header Injection
SQL Injection
Cross‑Site Scripting (XSS)
CSRF
SSO Vulnerabilities
XML Injection and XXE
CORS