3 ms·
- will the app be storing users details ? - is the app using any vulnerable packages - will app be displaying secure content - look at what information in lo
by paktek123 10y ago
- will the app be storing users details ?
- is the app using any vulnerable packages
- will app be displaying secure content
- look at what information in logs
Just some off top of my head.
- dlphii 10y agoThanks. And if you are given a big piece of source code. And no static/dynamic tools are allowed, only manual review. What should you look at first (PHP based site, authentication for users, online payment, very dynamic web-site).
- paktek123 10y agoI'd start with the basics - are any secrets/credentials visible in plain text? - how is input handled (escaping HTML etc) - how are headers and cookies being handled if any