Index.md

55 cheat sheets available.

Icons beside the cheat sheet name indicate in which language(s) code snippet(s) are provided.

A B C D E F H I J K L M O P Q R S T U V W X

A

Abuse Case Cheat Sheet.

Access Control Cheat Sheet.

AJAX Security Cheat Sheet.

Attack Surface Analysis Cheat Sheet.

Authentication Cheat Sheet.

Authorization Testing Automation.

B

Bean Validation Cheat Sheet.

C

C-Based Toolchain Hardening.

C-Based Toolchain Hardening Cheat Sheet.

Choosing and Using Security Questions Cheat Sheet.

Clickjacking Defense Cheat Sheet.

Credential Stuffing Prevention Cheat Sheet.

Cross-Site Request Forgery Prevention Cheat Sheet.

Cross Site Scripting Prevention Cheat Sheet.

Cryptographic Storage Cheat Sheet.

D

Denial of Service Cheat Sheet.

Deserialization Cheat Sheet.

DOM based XSS Prevention Cheat Sheet.

DotNet Security Cheat Sheet.

E

Error Handling Cheat Sheet.

F

Forgot Password Cheat Sheet.

H

HTML5 Security Cheat Sheet.

HTTP Strict Transport Security Cheat Sheet.

I

Injection Prevention Cheat Sheet in Java.

Input Validation Cheat Sheet.

Insecure Direct Object Reference Prevention Cheat Sheet.

J

JAAS Cheat Sheet.

JSON Web Token Cheat Sheet for Java.

K

Key Management Cheat Sheet.

L

LDAP Injection Prevention Cheat Sheet.

Logging Cheat Sheet.

M

Mass Assignment Cheat Sheet.

O

OS Command Injection Defense Cheat Sheet.

P

Password Storage Cheat Sheet.

Pinning Cheat Sheet.

Protect FileUpload Against Malicious File.

Q

Query Parameterization Cheat Sheet.

R

REST Assessment Cheat Sheet.

REST Security Cheat Sheet.

Ruby on Rails Cheatsheet.

S

SAML Security Cheat Sheet.

Securing Cascading Style Sheets Cheat Sheet.

Session Management Cheat Sheet.

SQL Injection Prevention Cheat Sheet.

T

Third Party Javascript Management Cheat Sheet.

Threat Modeling Cheat Sheet.

TLS Cipher String Cheat Sheet.

Transaction Authorization Cheat Sheet.

Transport Layer Protection Cheat Sheet.

U

Unvalidated Redirects and Forwards Cheat Sheet.

User Privacy Protection Cheat Sheet.

V

Virtual Patching Cheat Sheet.

Vulnerability Disclosure Cheat Sheet.

W

Web Service Security Cheat Sheet.

X

XML External Entity Prevention Cheat Sheet.