Web application security — methodology
AppSec · AppSec · Bug bounty · Pentester
Recon → map → test auth/access → injection → logic → report.
Concept map
Recon → Map → AuthZ → Inject/Logic → Remediate
1. Recon & mapping
Browser devtools, wayback, dorks on your domain, JS source maps in lab.
2. Authentication & session
MFA, lockout, password reset, JWT/OAuth flows — see Burp workflow.
3. Access control
IDOR, horizontal/vertical escalation, BOLA on APIs.
4. Injection & client issues
SQLi, XSS, SSRF, SSTI — match to vulns catalog + PortSwigger.
Case studies
Equifax (2017)
Unpatched Struts + weak segmentation — patch SLAs and WAF/IDS as defense in depth.