Kali Linux Web Penetration Testing Cookbook - Second Edition

How to do it...

1. If there is a page, form, or any piece of information in the application that should be viewed only by authorized users, make sure that a proper authentication is performed before showing it.
2. Make sure that usernames, IDs, passwords, and all other authentication data are case sensitive and unique for each user.
3. Establish a strong password policy that forces the users to create passwords that fulfill, at minimum, the following requirements:
   • Access denied
   • More than 8 characters, preferably 10
   • Use of upper-case and lower-case letters
   • Use of at least one numeric character (0-9)
   • Use of at least one special character (space, !, &, #, %, and so on)
   • Prefer long, easy-to-remember phrases over short, complex, and unrelated series ...