66 cheat sheets available.

Icons beside the cheat sheet name indicate in which language(s) code snippet(s) are provided.

ABCDEFHIJKLMNOPQRSTUVWX

A

AJAX Security Cheat Sheet.

Authorization Testing Automation.

Authentication Cheat Sheet.

Access Control Cheat Sheet.

Abuse Case Cheat Sheet.

Attack Surface Analysis Cheat Sheet.

B

Bean Validation Cheat Sheet.

C

Cross-Site Request Forgery Prevention Cheat Sheet.

Content Security Policy Cheat Sheet.

Choosing and Using Security Questions Cheat Sheet.

C-Based Toolchain Hardening.

Clickjacking Defense Cheat Sheet.

C-Based Toolchain Hardening Cheat Sheet.

Cryptographic Storage Cheat Sheet.

Credential Stuffing Prevention Cheat Sheet.

Cross Site Scripting Prevention Cheat Sheet.

D

Deserialization Cheat Sheet.

Docker Security Cheat Sheet.

Database Security Cheat Sheet.

Denial of Service Cheat Sheet.

DOM based XSS Prevention Cheat Sheet.

DotNet Security Cheat Sheet.

E

Error Handling Cheat Sheet.

F

Forgot Password Cheat Sheet.

File Upload Cheat Sheet.

H

HTML5 Security Cheat Sheet.

HTTP Strict Transport Security Cheat Sheet.

I

Injection Prevention Cheat Sheet in Java.

Insecure Direct Object Reference Prevention Cheat Sheet.

Injection Prevention Cheat Sheet.

Input Validation Cheat Sheet.

J

JAAS Cheat Sheet.

JSON Web Token Cheat Sheet for Java.

K

Key Management Cheat Sheet.

L

Logging Cheat Sheet.

LDAP Injection Prevention Cheat Sheet.

M

Microservices based Security Arch Doc Cheat Sheet.

Multifactor Authentication Cheat Sheet.

Mass Assignment Cheat Sheet.

N

Nodejs security cheat sheet.

O

OS Command Injection Defense Cheat Sheet.

P

Password Storage Cheat Sheet.

PHP Configuration Cheat Sheet.

Pinning Cheat Sheet.

Q

Query Parameterization Cheat Sheet.

R

REST Security Cheat Sheet.

REST Assessment Cheat Sheet.

Ruby on Rails Cheatsheet.

S

Session Management Cheat Sheet.

Server Side Request Forgery Prevention Cheat Sheet.

Securing Cascading Style Sheets Cheat Sheet.

SQL Injection Prevention Cheat Sheet.

SAML Security Cheat Sheet.

T

TLS Cipher String Cheat Sheet.

Threat Modeling Cheat Sheet.

Transaction Authorization Cheat Sheet.

Third Party Javascript Management Cheat Sheet.

Transport Layer Protection Cheat Sheet.

U

User Privacy Protection Cheat Sheet.

Unvalidated Redirects and Forwards Cheat Sheet.

V

Virtual Patching Cheat Sheet.

Vulnerable Dependency Management Cheat Sheet.

Vulnerability Disclosure Cheat Sheet.

W

Web Service Security Cheat Sheet.

X

XML Security Cheat Sheet.

XML External Entity Prevention Cheat Sheet.