Logged In: false
Session ID:
Username:

Cx GabeN's DAST Testing Tools

Authentication

Log Out

Classic Web Authentication Samples

"Classic" authentication methods don't use JavaScript. All the elements are present in the page source upon visiting it and none of the elements are loaded after the document loading.

Form-based JSON-based Form-based w/ Secret Header-based

Token-based

Token-based via Form Auth Token-based via JSON Auth (JWT)

Classic Status Checks

Get User Info via API
[There's a secret link here when you're logged in]

Modern Web Application

Modern applications tend to use JavaScript and AJAX requests to make outbound requests to trigger actions on the pages. The contents of the page may not necessarily exist initially on the page source.

(Still working on setting these examples up)

Modern Status Checks

These appear after a second through JavaScript