A community-written guide covering methods and test cases for security testing web applications and web services.
Hosts a fake location-permission page that captures a smartphone's GPS coordinates and device details from a visitor who clicks through.