Re: Captcha testing
rajat swarup <[email protected]>
| Newsgroups | gmane.comp.security.websecurity,gmane.comp.security.basics,gmane.comp.security.web-applications |
|---|---|
| Message-ID | <[email protected]> |
On Fri, Oct 1, 2010 at 12:25 PM, Kiran Kumar <[email protected]> wrote: > > I required to test captcha feature. Is there any standards to test this > feature? please suggest me any materials & tools. > Typically CAPTCHAs are implemented mostly as an afterthought. One of the things that I've seen is simply submitting the form by removing the CAPTCHA parameters and the "captcha required flag" altogether and the forms still seem to work. It's a very basic test but seems to work a lot. Also, sometimes replay might work. So as long as you have one right CAPTCHA you can replay the form multiple times with that same CAPTCHA and things do work. Hope it helps! -- Rajat Swarup www.rajatswarup.com ---------------------------------------------------------------------------- Join us on IRC: irc.freenode.net #webappsec Have a question? Search The Web Security Mailing List Archives: http://www.webappsec.org/lists/websecurity/archive/ Subscribe via RSS: http://www.webappsec.org/rss/websecurity.rss [RSS Feed] To unsubscribe email [email protected] and reply to the confirmation email Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA WASC on Twitter http://twitter.com/wascupdates