Knowledgebase
External Penetration Test
3. Attacking Login Portals
Other Logins

Other Logins

Username Enumeration

Check if username enumeration exists - is there a difference in the page response for a valid and invalid user?

Default Credentials

Search the name of the service that is running on Google and see if you can find any public documentation which includes default credentials, for example admin:admin.

Authentication Bypassess

Work in progress.