Hot answers tagged security-testing
Use Fiddler to inspect network traffic. In addition to clear text passwords you can try to reuse a session token by making a call using Fiddler or PostMan. Also, checkout OWASP's ZAP scanner.
Only top voted, non community-wiki answers of a minimum length are eligible