Basic security tests for web management application

[Ishay <ishaybs () gmail com>]

Hello list,

Our product’s management is done via WEB application.
The first page of the WEB application is a login page.

I am wondering what basic security tests (pen tests?) I need to do and 
what tools should I use.

I will appreciate your help with it.

Thanks,
Ishay