How to Test Authentication and Authorization for Security
summary
The talk shows how to test authentication and authorization security for web login pages using Burp Suite and BeEF. It focuses on common attacker methods to compromise account access—especially admin accounts—and demonstrates practical checks with those tools.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 2:12Auth vs authorization
- 5:57OWASP auth checklist
- 18:29Auth bypass and caching
- 27:54Testing authorization
- 33:46Identity management
- 36:16Automated auth testing
- 40:27Q&A
related talks
35mHow to Break API's
23mBURPing for Developers
38mCan I Touch You There? Tools and Techniques for Security Testing
15mJumpstart Security & Penetration Testing APIs
17mAn API Security Testing Blueprint: Because Unit Tests Just Aren't Enough.
27mHow to Start Security Testing Without Fear
46mHow to perform security testing of a Web application
34mPurple Team Strategies for Application Security