Introduction

64 cheat sheets available.

Icons beside the cheat sheet name indicate in which language(s) code snippet(s) are provided.

A B C D E F H I J K L M N O P Q R S T U V W X

A

Access Control Cheat Sheet.

Attack Surface Analysis Cheat Sheet.

Authentication Cheat Sheet.

AJAX Security Cheat Sheet.

Abuse Case Cheat Sheet.

Authorization Testing Automation Cheat Sheet.

B

Bean Validation Cheat Sheet.

C

Cross-Site Request Forgery Prevention Cheat Sheet.

Clickjacking Defense Cheat Sheet.

Cross Site Scripting Prevention Cheat Sheet.

Choosing and Using Security Questions Cheat Sheet.

Content Security Policy Cheat Sheet.

Credential Stuffing Prevention Cheat Sheet.

Cryptographic Storage Cheat Sheet.

D

Deserialization Cheat Sheet.

Docker Security Cheat Sheet.

Database Security Cheat Sheet.

DotNet Security Cheat Sheet.

DOM based XSS Prevention Cheat Sheet.

Denial of Service Cheat Sheet.

E

Error Handling Cheat Sheet.

F

File Upload Cheat Sheet.

Forgot Password Cheat Sheet.

H

HTML5 Security Cheat Sheet.

HTTP Strict Transport Security Cheat Sheet.

I

Injection Prevention Cheat Sheet.

Injection Prevention in Java Cheat Sheet.

Input Validation Cheat Sheet.

Insecure Direct Object Reference Prevention Cheat Sheet.

J

JAAS Cheat Sheet.

JSON Web Token for Java Cheat Sheet.

K

Key Management Cheat Sheet.

L

Logging Cheat Sheet.

LDAP Injection Prevention Cheat Sheet.

M

Multifactor Authentication Cheat Sheet.

Mass Assignment Cheat Sheet.

Microservices based Security Arch Doc Cheat Sheet.

N

NodeJS Security Cheat Sheet.

O

OS Command Injection Defense Cheat Sheet.

P

Password Storage Cheat Sheet.

PHP Configuration Cheat Sheet.

Pinning Cheat Sheet.

Q

Query Parameterization Cheat Sheet.

R

REST Security Cheat Sheet.

REST Assessment Cheat Sheet.

Ruby on Rails Cheat Sheet.

S

Securing Cascading Style Sheets Cheat Sheet.

SQL Injection Prevention Cheat Sheet.

Server Side Request Forgery Prevention Cheat Sheet.

SAML Security Cheat Sheet.

Session Management Cheat Sheet.

T

Transaction Authorization Cheat Sheet.

TLS Cipher String Cheat Sheet.

Transport Layer Protection Cheat Sheet.

Third Party Javascript Management Cheat Sheet.

Threat Modeling Cheat Sheet.

U

User Privacy Protection Cheat Sheet.

Unvalidated Redirects and Forwards Cheat Sheet.

V

Virtual Patching Cheat Sheet.

Vulnerability Disclosure Cheat Sheet.

Vulnerable Dependency Management Cheat Sheet.

W

Web Service Security Cheat Sheet.

X

XML External Entity Prevention Cheat Sheet.

XML Security Cheat Sheet.