Finding Security Misconfigurations

Active scanning with OWASP ZAP

Authenticated Manual Exploration

Manually explore the site and the perform an active scan.