2 Configuration and Deployment Management Testing

2.1 Test Network Infrastructure Configuration

2.2 Test Application Platform Configuration

2.3 Test File Extensions Handling for Sensitive Information

2.4 Review Old Backup and Unreferenced Files for Sensitive Information

2.5 Enumerate Infrastructure and Application Admin Interfaces

2.6 Test HTTP Methods

2.7 Test HTTP Strict Transport Security

2.8 Test RIA Cross Domain Policy

2.9 Test File Permission

2.10 Test for Subdomain Takeover

2.11 Test Cloud Storage

2.12 Test for Content Security Policy

2.13 Test for Path Confusion