Baaxadda ogeysiisyada nuglaanta
Nuglaanta ay daboolayso siyaasaddan Shaacinta Mas'uulka ah waa (laakiin aan ku xaddidnayn)
- Nuglaanta duritaanka
- Xaqiijinta iyo Maareynta Kalfadhiga oo Jaban
- Qorista Goobaha Kala Duwan (XSS)
- Hirgelinta Koodhka Fog
- Tixraaca Shayga Tooska ah ee aan Amniga lahayn
- Soo-gaadhista Xogta Xasaasiga ah
- Khalad Amniga ah
- Xakamaynta Gelitaanka Heerka Shaqada Maqan
- Isticmaalka Qaybaha leh Nuglaan la Ogyahay
- Dib-u-hagaajinta iyo Horumarka aan la ansaxin
- Jidka loo maro/Tusmada
- Shahaadooyinka la soo bandhigay
Nuglaanta ka baxsan siyaasaddan Shaacinta Mas'uuliyadda ah waa (laakiin aan ku xaddidnayn):
- Arrimaha u baahan isdhexgalka isticmaalaha ee aan macquul ahayn
- Tirinta akoonka iyadoo la adeegsanayo weerarrada xoogga-cad
- Been-abuurka Codsiga Goobta-Isdhaafsiga ah
- Siyaasadaha erayga sirta ah ee daciifka ah iyo shuruudaha kakanaanta erayga sirta ah
- Cinwaanada amniga ee http ee maqan oo aan u horseedin nuglaansho
- Clickjacking-ka bogagga internetka ee aan joogtada ahayn
- Warbixinnada laga helay aaladaha otomaatiga ah ama sawir-qaadista
- Nuglaanta saameysa isticmaalayaasha biraawsarrada duugoobay
- Joogitaanka sifada otomaatiga ah ee foomamka shabakadda
- Calaamadaha cookie-ga ee maqan ee ku yaal cookies-ka aan xasaasiga ahayn
- Warbixinnada arrimaha SSL, hababka ugu wanaagsan ama sirta aan amniga ahayn
- Diiwaanada SPF/DMARC/DKIM ee aan dhammaystirnayn ama maqan
- Weerarada is-ka-faa'iidaysiga ah
- Weerarada Injineerinka Bulshada
- Noocyada tijaabada ah ee codsiyada
- Arrimaha habaynta boostada oo ay ku jiraan dejinta SPF, DKIM, iyo DMARC
- Clickjacking bogagga aan lahayn ficillo xasaasi ah
- Been-abuurka Codsiga Goobta-Isdhaafsiga ah (CSRF) ee foomamka ama foomamka aan la xaqiijin iyada oo aan lahayn ficillo xasaasi ah
- Weeraro u baahan MITM ama marin u helid jireed oo aaladda isticmaalaha ah.
- Maktabado nugul oo hore loo yaqaanay oo aan lahayn Caddeyn shaqaynaysa oo Fikrad ah.
- Cirbadaha Qiimayaasha Kala Soocan ee Koma (CSV) iyada oo aan la muujin nuglaansho.
- Dhaqamada ugu wanaagsan ee habaynta SSL/TLS way maqan yihiin.
- Hawl kasta oo keeni karta carqaladeyn adeeggeena (DoS).
- Arrimaha been abuurka iyo duritaanka qoraalka iyada oo aan la muujin weerar vector/iyada oo aan la awoodin in wax laga beddelo HTML/CSS
- Xaddidaadda heerka ama arrimaha bruteforce ee ku saabsan dhammaadka aan la xaqiijin
- Dhaqamada ugu wanaagsan ee Siyaasadda Amniga Mawduuca ayaa maqan.
- Maqnaanshaha HttpOnly ama calaamadaha amniga ee ku jira cookies-ka
- Hababka ugu wanaagsan ee emaylka oo maqan (Diiwaanada SPF/DKIM/DMARC oo aan sax ahayn, aan dhammaystirnayn ama maqan, iwm.)
- Nuglaanshuhu wuxuu saameeyaa oo keliya isticmaalayaasha biraawsarrada duugoobay ama kuwa aan la hagaajin [Wax ka yar 2 nooc oo deggan ayaa ka dambeeya nooca xasilloon ee ugu dambeeyay ee la sii daayay]
- Shaacinta nooca software-ka / Arrimaha aqoonsiga banner-ka / Farriimaha ama cinwaanada khaladaadka sharraxaadda (tusaale raadadka isku-darka, khaladaadka codsiga ama server-ka).
- Tabnabbing
- Furan dib-u-hagaajin - haddii aan la muujin karin saameyn amni oo dheeraad ah