Web-Application-Pentest-Checklist
This is one of the largest checklist available so far on the Internet.
I have also added the raw XMIND file for you to use and custmise it the way you like.
Warning/Disclaimer: Read the detailed disclaimer at my blog - https://github.com/iamthefrogy/Disclaimer-Warning/blob/main/README.md