# Application Security Cheat Sheet

## Application Security Cheat Sheet

- [Application Security Cheat Sheet](https://0xn3va.gitbook.io/cheat-sheets/introduction.md)
- [Overview](https://0xn3va.gitbook.io/cheat-sheets/android-application/overview.md)
- [Application Data & Files](https://0xn3va.gitbook.io/cheat-sheets/android-application/overview/app-data-files.md)
- [Application Package](https://0xn3va.gitbook.io/cheat-sheets/android-application/overview/app-package.md)
- [Application Sandbox](https://0xn3va.gitbook.io/cheat-sheets/android-application/overview/app-sandbox.md)
- [Application Signing](https://0xn3va.gitbook.io/cheat-sheets/android-application/overview/app-signing.md)
- [Deployment](https://0xn3va.gitbook.io/cheat-sheets/android-application/overview/deployment.md)
- [Package Manager](https://0xn3va.gitbook.io/cheat-sheets/android-application/overview/package-manager.md)
- [Intent Vulnerabilities](https://0xn3va.gitbook.io/cheat-sheets/android-application/intent-vulnerabilities.md)
- [Deep Linking Vulnerabilities](https://0xn3va.gitbook.io/cheat-sheets/android-application/intent-vulnerabilities/deep-linking-vulnerabilities.md)
- [WebView Vulnerabilities](https://0xn3va.gitbook.io/cheat-sheets/android-application/webview-vulnerabilities.md)
- [WebResourceResponse Vulnerabilities](https://0xn3va.gitbook.io/cheat-sheets/android-application/webview-vulnerabilities/web-resource-response-vulnerabilities.md)
- [WebSettings Vulnerabilities](https://0xn3va.gitbook.io/cheat-sheets/android-application/webview-vulnerabilities/web-settings.md)
- [Dependency](https://0xn3va.gitbook.io/cheat-sheets/ci-cd/dependency.md)
- [Dependency Confusion](https://0xn3va.gitbook.io/cheat-sheets/ci-cd/dependency/dependency-confusion.md)
- [Dependency Hijaking](https://0xn3va.gitbook.io/cheat-sheets/ci-cd/dependency/dependency-hijacking.md)
- [Typosquatting](https://0xn3va.gitbook.io/cheat-sheets/ci-cd/dependency/typosquatting.md)
- [GitHub](https://0xn3va.gitbook.io/cheat-sheets/ci-cd/github.md)
- [GitHub Actions](https://0xn3va.gitbook.io/cheat-sheets/ci-cd/github/actions.md)
- [Code owners](https://0xn3va.gitbook.io/cheat-sheets/ci-cd/github/codeowners.md)
- [Dependabot](https://0xn3va.gitbook.io/cheat-sheets/ci-cd/github/dependabot.md)
- [Redirect](https://0xn3va.gitbook.io/cheat-sheets/ci-cd/github/redirect.md)
- [Releases](https://0xn3va.gitbook.io/cheat-sheets/ci-cd/github/releases.md)
- [AWS](https://0xn3va.gitbook.io/cheat-sheets/cloud/aws.md)
- [Amazon API Gateway](https://0xn3va.gitbook.io/cheat-sheets/cloud/aws/api-gateway.md)
- [Amazon Cognito](https://0xn3va.gitbook.io/cheat-sheets/cloud/aws/amazon-cognito.md)
- [Amazon S3](https://0xn3va.gitbook.io/cheat-sheets/cloud/aws/s3.md)
- [Overview](https://0xn3va.gitbook.io/cheat-sheets/container/overview.md)
- [Container Basics](https://0xn3va.gitbook.io/cheat-sheets/container/overview/basics.md)
- [Docker Engine](https://0xn3va.gitbook.io/cheat-sheets/container/overview/docker-engine.md)
- [Escaping](https://0xn3va.gitbook.io/cheat-sheets/container/escaping.md)
- [CVE List](https://0xn3va.gitbook.io/cheat-sheets/container/escaping/cve-list.md)
- [Exposed Docker Socket](https://0xn3va.gitbook.io/cheat-sheets/container/escaping/exposed-docker-socket.md)
- [Excessive Capabilities](https://0xn3va.gitbook.io/cheat-sheets/container/escaping/excessive-capabilities.md)
- [Host Networking Driver](https://0xn3va.gitbook.io/cheat-sheets/container/escaping/host-networking-driver.md)
- [PID Namespace Sharing](https://0xn3va.gitbook.io/cheat-sheets/container/escaping/pid-namespace-sharing.md)
- [Sensitive Mounts](https://0xn3va.gitbook.io/cheat-sheets/container/escaping/sensitive-mounts.md)
- [Container Analysis Tools](https://0xn3va.gitbook.io/cheat-sheets/container/container-analysis-tools.md)
- [Spring](https://0xn3va.gitbook.io/cheat-sheets/framework/spring.md)
- [Overview](https://0xn3va.gitbook.io/cheat-sheets/framework/spring/overview.md)
- [Mass Assignment](https://0xn3va.gitbook.io/cheat-sheets/framework/spring/mass-assignment.md)
- [Routing Abuse](https://0xn3va.gitbook.io/cheat-sheets/framework/spring/routing-abuse.md)
- [SpEL Injection](https://0xn3va.gitbook.io/cheat-sheets/framework/spring/spel-injection.md)
- [Spring Boot Actuators](https://0xn3va.gitbook.io/cheat-sheets/framework/spring/spring-boot-actuators.md)
- [Spring Data Redis Insecure Deserialization](https://0xn3va.gitbook.io/cheat-sheets/framework/spring/spring-data-redis-insecure-deserialization.md)
- [Spring View Manipulation](https://0xn3va.gitbook.io/cheat-sheets/framework/spring/view-manipulation.md)
- [React](https://0xn3va.gitbook.io/cheat-sheets/framework/react.md)
- [Overview](https://0xn3va.gitbook.io/cheat-sheets/framework/react/overview.md)
- [Security Issues](https://0xn3va.gitbook.io/cheat-sheets/framework/react/security-issues.md)
- [Overview](https://0xn3va.gitbook.io/cheat-sheets/linux/overview.md)
- [Philosophy](https://0xn3va.gitbook.io/cheat-sheets/linux/overview/philosophy.md)
- [File](https://0xn3va.gitbook.io/cheat-sheets/linux/overview/file.md)
- [File Descriptor](https://0xn3va.gitbook.io/cheat-sheets/linux/overview/file-descriptor.md)
- [I/O Redirection](https://0xn3va.gitbook.io/cheat-sheets/linux/overview/io-redirection.md)
- [Process](https://0xn3va.gitbook.io/cheat-sheets/linux/overview/process.md)
- [Inter Process Communication](https://0xn3va.gitbook.io/cheat-sheets/linux/overview/inter-process-communication.md)
- [Shell](https://0xn3va.gitbook.io/cheat-sheets/linux/overview/shell.md)
- [Signals](https://0xn3va.gitbook.io/cheat-sheets/linux/overview/signals.md)
- [Socket](https://0xn3va.gitbook.io/cheat-sheets/linux/overview/socket.md)
- [User Space vs Kernel Space](https://0xn3va.gitbook.io/cheat-sheets/linux/overview/user-kernel-space.md)
- [Bash Tips](https://0xn3va.gitbook.io/cheat-sheets/linux/bash-tips.md)
- [Overview](https://0xn3va.gitbook.io/cheat-sheets/ios-application/overview.md)
- [Application Data & Files](https://0xn3va.gitbook.io/cheat-sheets/ios-application/overview/app-data-files.md)
- [Application Package](https://0xn3va.gitbook.io/cheat-sheets/ios-application/overview/app-package.md)
- [Application Sandbox](https://0xn3va.gitbook.io/cheat-sheets/ios-application/overview/app-sandbox.md)
- [Application Signing](https://0xn3va.gitbook.io/cheat-sheets/ios-application/overview/app-signing.md)
- [Deployment](https://0xn3va.gitbook.io/cheat-sheets/ios-application/overview/deployment.md)
- [Getting Started](https://0xn3va.gitbook.io/cheat-sheets/ios-application/getting-started.md)
- [IPA Patching](https://0xn3va.gitbook.io/cheat-sheets/ios-application/getting-started/ipa-patching.md)
- [Source Code Patching](https://0xn3va.gitbook.io/cheat-sheets/ios-application/getting-started/source-patching.md)
- [Testing with Objection](https://0xn3va.gitbook.io/cheat-sheets/ios-application/getting-started/objection.md)
- [Lists](https://0xn3va.gitbook.io/cheat-sheets/resources/lists.md)
- [Payloads](https://0xn3va.gitbook.io/cheat-sheets/resources/lists/payloads.md)
- [Wordlists](https://0xn3va.gitbook.io/cheat-sheets/resources/lists/wordlists.md)
- [Researching](https://0xn3va.gitbook.io/cheat-sheets/resources/researching.md)
- [Web Application](https://0xn3va.gitbook.io/cheat-sheets/resources/researching/web-application.md)
- [Write-ups](https://0xn3va.gitbook.io/cheat-sheets/resources/researching/write-ups.md)
- [Software](https://0xn3va.gitbook.io/cheat-sheets/resources/software.md)
- [AWS Tools](https://0xn3va.gitbook.io/cheat-sheets/resources/software/aws-tools.md)
- [Azure Tools](https://0xn3va.gitbook.io/cheat-sheets/resources/software/azure-tools.md)
- [Component Analysis](https://0xn3va.gitbook.io/cheat-sheets/resources/software/component-analysis.md)
- [Docker Analysis](https://0xn3va.gitbook.io/cheat-sheets/resources/software/docker-analysis.md)
- [Dynamic Analysis](https://0xn3va.gitbook.io/cheat-sheets/resources/software/dynamic-analysis.md)
- [Fuzzing](https://0xn3va.gitbook.io/cheat-sheets/resources/software/fuzzing.md)
- [GCP Tools](https://0xn3va.gitbook.io/cheat-sheets/resources/software/gcp-tools.md)
- [Reverse Engineering](https://0xn3va.gitbook.io/cheat-sheets/resources/software/reverse-engineering.md)
- [Static Analysis](https://0xn3va.gitbook.io/cheat-sheets/resources/software/static-analysis.md)
- [Vulnerability Scanning](https://0xn3va.gitbook.io/cheat-sheets/resources/software/vulnerability-scanning.md)
- [Training](https://0xn3va.gitbook.io/cheat-sheets/resources/training.md)
- [Secure Development](https://0xn3va.gitbook.io/cheat-sheets/resources/training/secure-development.md)
- [Abusing HTTP hop-by-hop Request Headers](https://0xn3va.gitbook.io/cheat-sheets/web-application/abusing-http-hop-by-hop-request-headers.md)
- [Broken Authentication](https://0xn3va.gitbook.io/cheat-sheets/web-application/broken-authentication.md)
- [Two-Factor Authentication Vulnerabilities](https://0xn3va.gitbook.io/cheat-sheets/web-application/broken-authentication/two-factor-authentication-vulnerabilities.md)
- [Command Injection](https://0xn3va.gitbook.io/cheat-sheets/web-application/command-injection.md)
- [Argument Injection](https://0xn3va.gitbook.io/cheat-sheets/web-application/command-injection/argument-injection.md)
- [Content Security Policy](https://0xn3va.gitbook.io/cheat-sheets/web-application/content-security-policy.md)
- [Cookie Security](https://0xn3va.gitbook.io/cheat-sheets/web-application/cookie-security.md)
- [Cookie Bomb](https://0xn3va.gitbook.io/cheat-sheets/web-application/cookie-security/cookie-bomb.md)
- [Cookie Jar Overflow](https://0xn3va.gitbook.io/cheat-sheets/web-application/cookie-security/cookie-jar-overflow.md)
- [Cookie Tossing](https://0xn3va.gitbook.io/cheat-sheets/web-application/cookie-security/cookie-tossing.md)
- [CORS Misconfiguration](https://0xn3va.gitbook.io/cheat-sheets/web-application/cors-misconfiguration.md)
- [File Upload Vulnerabilities](https://0xn3va.gitbook.io/cheat-sheets/web-application/file-upload-vulnerabilities.md)
- [GraphQL Vulnerabilities](https://0xn3va.gitbook.io/cheat-sheets/web-application/graphql-vulnerabilities.md)
- [HTML Injection](https://0xn3va.gitbook.io/cheat-sheets/web-application/html-injection.md)
- [base](https://0xn3va.gitbook.io/cheat-sheets/web-application/html-injection/base.md)
- [iframe](https://0xn3va.gitbook.io/cheat-sheets/web-application/html-injection/iframe.md)
- [link](https://0xn3va.gitbook.io/cheat-sheets/web-application/html-injection/link.md)
- [meta](https://0xn3va.gitbook.io/cheat-sheets/web-application/html-injection/meta.md)
- [target attribute](https://0xn3va.gitbook.io/cheat-sheets/web-application/html-injection/target.md)
- [HTTP Header Security](https://0xn3va.gitbook.io/cheat-sheets/web-application/http-headers-security.md)
- [HTTP Request Smuggling](https://0xn3va.gitbook.io/cheat-sheets/web-application/http-request-smuggling.md)
- [Improper Rate Limits](https://0xn3va.gitbook.io/cheat-sheets/web-application/improper-rate-limits.md)
- [JavaScript Prototype Pollution](https://0xn3va.gitbook.io/cheat-sheets/web-application/javascript-prototype-pollution.md)
- [JSON Web Token Vulnerabilities](https://0xn3va.gitbook.io/cheat-sheets/web-application/json-web-token-vulnerabilities.md)
- [OAuth 2.0 Vulnerabilities](https://0xn3va.gitbook.io/cheat-sheets/web-application/oauth-2.0-vulnerabilities.md)
- [OpenID Connect Vulnerabilities](https://0xn3va.gitbook.io/cheat-sheets/web-application/oauth-2.0-vulnerabilities/openid-connect.md)
- [Race Condition](https://0xn3va.gitbook.io/cheat-sheets/web-application/race-condition.md)
- [Server Side Request Forgery](https://0xn3va.gitbook.io/cheat-sheets/web-application/server-side-request-forgery.md)
- [Post Exploitation](https://0xn3va.gitbook.io/cheat-sheets/web-application/server-side-request-forgery/post-exploitation.md)
- [SVG Abuse](https://0xn3va.gitbook.io/cheat-sheets/web-application/svg-abuse.md)
- [Weak Random Generation](https://0xn3va.gitbook.io/cheat-sheets/web-application/weak-random-generation.md)
- [Web Cache Poisoning](https://0xn3va.gitbook.io/cheat-sheets/web-application/web-cache-poisoning.md)