User Password Enumeration
|
Web Application |
100 |
|
Bruteforce
|
Web Application |
100 |
|
JavaScript - Info leak
|
Web Application |
100 |
|
Encoding - Hashing
|
Web Application |
100 |
|
Guessable Session ID
|
Web Application |
100 |
|
Unrestricted File Upload
|
Web Application |
100 |
|
Metafiles - Info Leakage
|
Web Application |
100 |
|
Activity data
|
Insecure Data Storage |
100 |
|
Default Credentials
|
Web Application |
100 |
|
Backdoor5
|
Miscellaneous |
100 |
|
Backdoor6
|
Miscellaneous |
100 |
|
RPATH
|
Binary Protection |
100 |
|
Hardcoded Secret
|
Binary Protection |
100 |
|
Backdoor4
|
Miscellaneous |
100 |
|
Backdoor2
|
Miscellaneous |
100 |
|
MD4
|
Hashing |
100 |
|
Backdoor3
|
Miscellaneous |
100 |
|
Backdoor1
|
Miscellaneous |
100 |
|
HTML5 Controls
|
Web Application |
100 |
|
REST API HTTP Methods
|
Web Application |
100 |
|
JWT Misconfiguration
|
Web Application |
100 |
|
Login bypass
|
Web Application |
100 |
|
Emulator Files Check
|
Emulator detection |
100 |
|
GPS Location
|
Device ID |
100 |
|
IMEI/ESN
|
Device ID |
100 |
|
SSAID/ANDROID_ID
|
Device ID |
100 |
|
Client Side Validation Bypass
|
Web Application |
100 |
|
Server Fingerprint
|
Web Application |
100 |
|
QR Code
|
Miscellaneous |
100 |
|
Clipboard
|
Insecure Data Storage |
100 |
|
WTF Logs
|
Logs |
100 |
|
Verbose Logs
|
Logs |
100 |
|
Debug Logs
|
Logs |
100 |
|
Warnings Logs
|
Logs |
100 |
|
Error Logs
|
Logs |
100 |
|
Informational Logs
|
Logs |
100 |
|
UDP Traffic
|
Non-HTTP Traffic |
100 |
|
TCP Traffic
|
Non-HTTP Traffic |
100 |
|
HTTPS Traffic
|
HTTP Traffic |
100 |
|
HTTP Traffic
|
HTTP Traffic |
100 |
|
Sanity Check Flag
|
Sanity Check |
0 |
|