Very interesting read. Amazing to see where information gathering and simple hacking techniques can lead you...
Pilots have checklists, web developers have Application Security Verification Standard (2014)! https://www.owasp.org/images/5/58/OWASP_ASVS_Version_2.pdf