|
HTML5 Controls
|
Web Application |
100 |
|
|
Old Backup Files
|
Web Application |
100 |
|
|
Review comment and Metadata
|
Web Application |
100 |
|
|
Server Fingerprint
|
Web Application |
100 |
|
|
RIA Cross Domain Policy
|
Web Application |
100 |
|
|
Login bypass
|
Web Application |
100 |
|
|
Backdoor6
|
Miscellaneous |
100 |
|
|
Unrestricted File Upload
|
Web Application |
100 |
|
|
REST API HTTP Methods
|
Web Application |
100 |
|
|
SSTI
|
Web Application |
100 |
|
|
JavaScript - Info leak
|
Web Application |
100 |
|
|
External Storage
|
Insecure Data Storage |
100 |
|
|
Default Credentials
|
Web Application |
100 |
|
|
Insecure Direct Object Reference
|
Web Application |
100 |
|
|
Client Side Validation Bypass
|
Web Application |
100 |
|
|
JWT Misconfiguration
|
Web Application |
100 |
|
|
MD4
|
Hashing |
100 |
|
|
SHA1
|
Hashing |
100 |
|
|
MD5
|
Hashing |
100 |
|
|
Encoding - Hashing
|
Web Application |
100 |
|
|
Bruteforce
|
Web Application |
100 |
|
|
User Password Enumeration
|
Web Application |
100 |
|
|
SSRF
|
Web Application |
100 |
|
|
Root Management Apps
|
Root Detection |
100 |
|
|
BusyBox Binary
|
Root Detection |
100 |
|
|
Dangerous Props
|
Root Detection |
100 |
|
|
Su Exists
|
Root Detection |
100 |
|
|
Su Binary
|
Root Detection |
100 |
|
|
Verbose Logs
|
Logs |
100 |
|
|
WTF Logs
|
Logs |
100 |
|
|
Debug Logs
|
Logs |
100 |
|
|
Warnings Logs
|
Logs |
100 |
|
|
Error Logs
|
Logs |
100 |
|
|
Informational Logs
|
Logs |
100 |
|
|
Internal Storage
|
Insecure Data Storage |
100 |
|
|
Shared Preferences
|
Insecure Data Storage |
100 |
|
|
SQLite Databases (Unencrypted)
|
Insecure Data Storage |
100 |
|
|
HTTPS Traffic
|
HTTP Traffic |
100 |
|
|
HTTP Traffic
|
HTTP Traffic |
100 |
|
|
Sanity Check Flag
|
Sanity Check |
0 |
|