This is one good resource: <a href="https:&#x2F;&#x2F;www.owasp.org&#x2F;index.php&#x2F;Web_Application_Security_Testing_Cheat_Sheet" rel="nofollow">https:&#x2F;&#x2F;www.owasp.org&#x2F;index.php&#x2F;Web_Application_Security_Tes...</a>