Attacks against Broken Authentication

links: WS TOC - Broken Authentication - Index

---

Attacks against the authentication abuse weaknesses in the authentication mechanism such as:

• Logout
• Password Management
• Timeout
• "Remember Me" functionality
• and others.

Well known attacks against the authentication of a web page include:

• Brute Force (Broken Authentication)
• Session Spotting
• Session Fixation Attack
• Session Hijacking
• Session Expiration

---

links: WS TOC - Broken Authentication - Index