SVIG/python-bootcamp
7
0
Fork 1
Code Issues Pull Requests 1 Releases Wiki Activity

Update page 'OWASP test - Sloetjes'

xuanyi.wang
2023-05-25 17:29:07 +02:00
parent 7836de13f9
commit 129e30d4a7
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
OWASP test - Sloetjes.md
+4 -4
@@ -11,11 +11,11 @@
> * If a login attempt fails:
> > Record the IP address, timestamp, and username.
> crease the count of failed attempts for this IP address and/or username.
> > crease the count of failed attempts for this IP address and/or username.
> * If there are more than a certain number of failed attempts in a certain timeframe from the same IP or username:
> Use a geolocation service to identify the location of the IP.
> Compare this location to the known or expected location of the user.
> Check the user's permission level. Higher-risk users (like admins) may warrant tighter security measures.
> > Use a geolocation service to identify the location of the IP.
> > Compare this location to the known or expected location of the user.
> > Check the user's permission level. Higher-risk users (like admins) may warrant tighter security measures.
> * If the location doesn't match or there are too many attempts, it may be a brute force or break-in attempt. Notify the administrators based on these factors.
* Describe the lifetime of a session-only cookie, and how this could be used to create a session authorization token.