https://beardenx.github.io/posts/Web-Application-Penetration-Testing-Checklist/
Web Application Pentest Checklist - $[beard3nx]