OWASP Testing Guide

Foreword by Eoin Keary
Frontispiece
Introduction
The OWASP Testing Framework
- The Web Security Testing Framework
- Penetration Testing Methodologies
Web Application Security Testing
Reporting
- Reporting
- Vulnerability Naming Schemes
Appendix
Testing Checklist
Table of Contents
REST Assessment Cheat Sheet
API Testing

Powered by GitBook

On this page

Web Application Security Testing

Authentication Testing

PreviousTesting for Weak or Unenforced Username Policy (WSTG-IDNT-05)NextTesting for Credentials Transported over an Encrypted Channel (WSTG-ATHN-01)

Last updated 2 years ago

4.4.1

4.4.2

4.4.3

4.4.4

4.4.5

4.4.6

4.4.7

4.4.8

4.4.9

4.4.10

4.4.11

Testing for Credentials Transported over an Encrypted Channel

Testing for Default Credentials

Testing for Weak Lock Out Mechanism

Testing for Bypassing Authentication Schema

Testing for Vulnerable Remember Password

Testing for Browser Cache Weaknesses

Testing for Weak Password Policy

Testing for Weak Security Question Answer

Testing for Weak Password Change or Reset Functionalities

Testing for Weaker Authentication in Alternative Channel

Testing Multi-Factor Authentication