CAPTCHA Testing

• Missing Captcha Field Integrity Checks

• HTTP Verb Manipulation

• Content Type Conversion

• Reusable Captcha

• Check if the captcha is retrievable with the absolute path such as www.test.com/internal/captcha/images/24.png

• Check for the server-side validation for CAPTCHA. Remove the captcha block from GUI using the Firebug addon and submit the request to the server

• Check if image recognition can be done with OCR tool?