This is a brief whitepaper discussing methods of validating a lack of access restriction for various pages on sites. It discusses everything from visual viewing and comparison between cookies used and using an implementation of the Damerau-Levensthein model. They also have a tool for download.
You can download it from the following link: https://packetstormsecurity.com/files/download/112965/Failure_to_restrict_access_tool.pdf
Source: https://packetstormsecurity.com/files/112965/Failure-To-Restrict-Access.html