Re: [WEB SECURITY] Captcha testing

[rajat swarup <rajats () gmail com>]

On Fri, Oct 1, 2010 at 12:25 PM, Kiran Kumar <software.kk () gmail com> wrote:
> I required to test captcha feature. Is there any standards to test this
> feature? please suggest me any materials & tools.
Typically CAPTCHAs are implemented mostly as an afterthought.  One of
the things that I've seen is simply submitting the form by removing
the CAPTCHA parameters and the "captcha required flag" altogether and
the forms still seem to work.  It's a very basic test but seems to
work a lot.

Also, sometimes replay might work.  So as long as you have one right
CAPTCHA you can replay the form multiple times with that same CAPTCHA
and things do work.

Hope it helps!
-- 
Rajat Swarup
www.rajatswarup.com

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------