# 4.4 Authentication Testing

4.4.1 [Testing for Credentials Transported over an Encrypted Channel](01-Testing_for_Credentials_Transported_over_an_Encrypted_Channel.md)

4.4.2 [Testing for Default Credentials](02-Testing_for_Default_Credentials.md)

4.4.3 [Testing for Weak Lock Out Mechanism](03-Testing_for_Weak_Lock_Out_Mechanism.md)

4.4.4 [Testing for Bypassing Authentication Schema](04-Testing_for_Bypassing_Authentication_Schema.md)

4.4.5 [Testing for Vulnerable Remember Password](05-Testing_for_Vulnerable_Remember_Password.md)

4.4.6 [Testing for Browser Cache Weaknesses](06-Testing_for_Browser_Cache_Weaknesses.md)

4.4.7 [Testing for Weak Authentication Methods](07-Testing_for_Weak_Authentication_Methods.md)

4.4.8 [Testing for Weak Security Question Answer](08-Testing_for_Weak_Security_Question_Answer.md)

4.4.9 [Testing for Weak Password Change or Reset Functionalities](09-Testing_for_Weak_Password_Change_or_Reset_Functionalities.md)

4.4.10 [Testing for Weaker Authentication in Alternative Channel](10-Testing_for_Weaker_Authentication_in_Alternative_Channel.md)

4.4.11 [Testing Multi-Factor Authentication](11-Testing_Multi-Factor_Authentication.md)
