XXE
|
Web Application |
100 |
|
Guessable Session ID
|
Web Application |
100 |
|
JWT Misconfiguration
|
Web Application |
100 |
|
Client Side Validation Bypass
|
Web Application |
100 |
|
Server Fingerprint
|
Web Application |
100 |
|
JavaScript - Info leak
|
Web Application |
100 |
|
HTML5 Controls
|
Web Application |
100 |
|
2FA - Response Manipulation
|
Authentication |
100 |
|
2FA - OTP Leakage
|
Authentication |
100 |
|
Activity data
|
Insecure Data Storage |
100 |
|
External Storage
|
Insecure Data Storage |
100 |
|
Internal Storage
|
Insecure Data Storage |
100 |
|
Shared Preferences
|
Insecure Data Storage |
100 |
|
SQLite Databases (Unencrypted)
|
Insecure Data Storage |
100 |
|
Informational Logs
|
Logs |
100 |
|
UDP Traffic
|
Non-HTTP Traffic |
100 |
|
TCP Traffic
|
Non-HTTP Traffic |
100 |
|
HTTPS Traffic
|
HTTP Traffic |
100 |
|
HTTP Traffic
|
HTTP Traffic |
100 |
|
Sanity Check Flag
|
Sanity Check |
0 |
|