> For the complete documentation index, see [llms.txt](https://notes.m4lwhere.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.m4lwhere.org/offensive/web-exploits.md).

# Websites

Anything and Everything

## Methodology

Rough outline of actions to take when evaluating the security of a website.

![Methodology and Flow](https://15634114-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MUBcWDIntFMCfIaMka5%2F-MUOvXb9rV6AwBklJXka%2F-MUOvtnBw9g_FjcPPESo%2Fweb%20app%20pentesting%20flowchart.png?alt=media\&token=c093fe46-5b85-4eb0-940f-c8cca7ea0cb0)

{% embed url="<https://owasp.org/www-project-web-security-testing-guide/stable/>" %}