I'm not sure what the checklist meant, because it could be related to development (so that developers write fewer errors), code review (to check errors in the review), or testing (to ensure that all aspects of the vulnerability are for testing).
OWASP has guides to support all three needs -
And then, to complete this, you can always go to the OWASP Top 10 list to prioritize vulnerabilities that you would like to focus on most of your efforts.
As Mark noted , the OWASP.NET project will be useful.
source
share