Account Enumeration describes an application that, in response to a failed authentication attempt, returns a response indicating whether the authentication failed due to an incorrect account identifier or an incorrect password. In essence, it describes an authentication process in which the user is […]
If you are not already familiar with the concept of Weak Authentication, we suggest you review the article entitled “What Is Weak Authentication ?“. For insight into how to detect Weak Authentication vulnerabilities, please see the article entitled “How To Test For Weak Authentication“. Preventing […]
One of the OWASP Top 10 vulnerabilities is Weak Authentication and Session Management. This entry is not always clearly understood as it actually refers to two large categories of web-application vulnerabilities. In this article, we examine vulnerabilities related to Weak […]
