Kali Linux Web Penetration Testing Cookbook - Second Edition

How it works...

Authentication mechanisms in web applications are very often reduced to a username/password login page. Although not the most secure option, it is the easiest for users and developers; when dealing with passwords, their most important aspect is their strength.

As we have seen throughout this book, the strength of a password is given by how hard it is to break, be it by brute force, dictionary, or guessing. The first tips in this recipe are meant to make passwords harder to brute-force by establishing a minimum length, and using mixed character sets harder to guess by eliminating the more intuitive choices (username, most common passwords, and company name), and harder to break if leaked by using strong hashing or encryption ...