Checklists

https://github.com/shieldfy/API-Security-Checklist

https://gbhackers.com/web-server-penetration-testing-checklist/

https://gbhackers.com/web-application-penetration-testing-checklist-a-detailed-cheat-sheet/

https://pentestbook.six2dez.com/others/web-checklist (https://github.com/six2dez/pentest-book/blob/master/others/web-checklist.md)

https://github.com/tanprathan/OWASP-Testing-Checklist

https://redtm.com/web-pentest/web-pentesting-checklist/

https://github.com/inonshk/31-days-of-API-Security-Tips

https://github.com/Traceableai/31-days-of-pentesting

https://apimike.com/api-penetration-testing-checklisthttps://web.archive.org/web/20210607123429/https://www.binarybrotherhood.io/oauth2_threat_model.html

https://hackanythingfor.blogspot.com/2020/07/api-testing-checklist.html?m=1

https://github.com/HolyBugx/HolyTips/blob/main/Checklist/API%20Security.pdf

https://www.apiopscycles.com/api-audit-checklist

https://github.com/sehno/Bug-bounty/blob/master/bugbounty_checklist.md

https://dsopas.github.io/MindAPI/play/