The existing weak password detection method based on dynamic intercept is of low complexity and low degree of automation

which can not meet the needs of information security supervision. In this paper

a weak password detection method based on the static analysis of webpage is proposed

which automatically extracts the key information of login process by identifying and analyzing the form of the login page. Based on this method

a system prototype which can automatically detect the weak password for Web application and supports captcha recognize of common digital and letter combinations is realized.The system has a high degree of automation

and has good practicability and application prospect.