SecBot test case templates

SecBot provides free templates for common test scenarios that can be selected when creating a test.

General

• Security Headers
• Strict Transport Security
• Disallow Trace
• Referrer-Policy

Technology specific

Apache Tomcat

• Tomcat readonly must be set to true (RCE)
• Tomcat examples must be removed

JavaServer Faces (JSF)

• JSF (Mojarra) ViewState must not be unencrypted
• JSF (MyFaces) ViewState must not be unencrypted