Insecure Authentication Class

Test User Registration Process (OTG-IDENT-002)

Testing for Weak Lock Out Mechanism (OTG-AUTHN-003)

Testing for Bypassing Authentication Schema (OTG-AUTHN-004)

Test Remember Password Functionality (OTG-AUTHN-005)

Testing for Browser Cache Weakness (OTG-AUTHN-006)

Testing for Weak Security Question/Answer (OTG-AUTHN-008)

Testing for Weak Password Change or Reset Functionalities (OTG-AUTHN-009)

Testing for Weaker Authentication in Alternative Channel (OTG-AUTHN-010)

Testing for Weak or Unenforced Username Policy (OTG-IDENT-005)

Testing for Default Credentials (OTG-AUTHN-002)

Testing for Two Factor Authentication Bypass (EXTRA-TEST-012)

References

Examples