• How to find your authenticator secret key

  When you enable 2FA on a login form and want Beagle Security to test through it, you need to provide the TOTP secret key. This is the same key your authenticator app uses to generate time-based one-time passwords. The steps below show you how to retrieve it from Google Authenticator and Microsoft Authenticator. Google authenticator set-up Download the Google Authenticator app on your mobile device. Go to the app or service you want to test and open its security settings. Look for two-faFew readers

• How to record complex business logic scenarios in my web application?

  Scenario recording allows you to capture complex user flows and business processes within your application and provide them to Beagle Security for targeted testing. By recording a scenario, you can direct Beagle Security’s test engine to focus on specific workflows that may not be easily discovered through automated crawling alone. Navigating to scenario recording Go to Applications and select the application you want to configure. Click on the Configuration tab. Click on **AFew readers

• Choosing the right authentication method for your web application

  To perform authenticated testing, Beagle Security needs to log in to your web application successfully. Choosing the authentication method that matches your application’s login flow helps ensure the testing engine can access authenticated areas and produce accurate results. Beagle Security supports four authentication methods: Recorded login Login Signup Third-party login The sections below can help you determine which method is best suited for your application. ![](https://storagFew readers

• How to verify the authentication happened correctly?

  Before reviewing your test results, it’s important to verify that authenticated testing worked as expected. Beagle Security provides multiple ways to confirm whether authentication was successful and whether authenticated areas of your application were tested. Verify authentication during the test After starting the penetration test, navigate to the Testing tab and monitor the test progress. Beagle Security will indicate whether authentication was successful or failed. If authentication fFew readers

• How to set up authenticated testing in Beagle Security using third party login method?

  Steps to set up authentication using third party login Select the application you want to run a test on. From within the Configurations tab, select Test credentials under Basic section. Click the Enable test credentials toggle button to turn it on. Choose Thirdparty from the drop-down menu. ![](https://storage.crisp.chat/users/helpdesk/website/-/f/6/7/c/f67Some readers

• How to set up authenticated testing in Beagle Security using login form method?

  To ensure comprehensive security coverage for all webpages of your application, especially those behind a login screen, Beagle Security offers four methods to set up and run authenticated tests. These methods are designed to address various authentication scenarios, providing you with the flexibility to choose the best fit for your application. Available authentication methods Login form authentication Recorded login Sign up Third-party login In this help article, weSome readers

• Login Recorder: Record the login sequence of your application

  For web applications with a login module, Beagle Security allows you to submit a recording of the login sequence in order to improve the efficiency of the automated penetration tests. To record the login sequence of an application, you'll have to first download the Beagle Login Recorder extension from the application settings. | Please note that providing user credentials for CMS websites may alter data on your website during testing. A few points to note while recording a login sequencSome readers

• What are the important things to keep in mind before starting an authenticated test?

  Beagle Security allows you to test websites behind a login. But there are a few things you should keep in mind before adding login credentials. Beagle Security will test the application thoroughly by clicking every button and filling every form field with sample data wherever applicable. The sample data can be text, images or any other files types. Things to avoid Do not use admin login credentials when scanning a production environment as Beagle Security will crawl and click on everythingFew readers

• What is basic/HTTP authentication?

  If access to a website you're security testing is restricted by means of an HTTP or basic authentication, you'll have to provide the credentials to allow Beagle Security to access it and perform the penetration test. The below image is an example of a website with HTTP authentication. TP authentication is the simplest technique for enforcing access controls by prompting a website vSome readers

• How to set up automatic email forwarding for 2FA or magic link enabled login?

  How to set up automatic email forwarding in Gmail web? Log into your Gmail account Click on the show search option from the search box at the top Enter your search criteria i.e., enter the criteria for the emails you want to forward. This could include specific senders (from address), subjects, keywords, or any other relevant information. Click on Search to see which emails match your search criteria. This step ensures that your search is working correctly and captures thePopular