Please enable JavaScript.
Coggle requires JavaScript to display documents.
Web Application Pentesting :unlock: - Coggle Diagram
Web Application Pentesting
:unlock:
Authentication Enumeration
Identifying Valid Usernames
login
signup
reset password
predictable token bruteforce with burp
verbose Errors
Data breaches
Password Policy
Verbose errors
internal paths
database details
user informations
Techniques to get verbose errors
invalid login attempts
sql injection
File inclusion / path traversal
Form manipulation
Application Fuzzng
Basic authentication bypass
username + password encorded with base64 and send via Authorization header =>
Authorization: Basic <credentials>
, where <credentials> is the base64 encoding of username:password