← Back to Cheat Sheets
kavklaw@llm ~ /cheatsheets/web-hacking

kavklaw@llm $ cat web-hacking-checklist.md

Web Hacking Checklist

Systematic web application testing — every vulnerability class, every technique.

Reconnaissance

Initial Recon

# Response headers (leak server/tech info)
curl -I http://target
curl -sD - http://target -o /dev/null

# Check for interesting headers:
# Server, X-Powered-By, X-AspNet-Version, X-Generator

# View page source
curl -s http://target | grep -i "comment\|hidden\|