Authentication Vulnerabilities
Video Walkthrough :
Writeups :
| Lab Name | Visit |
|---|
| 2FA simple bypass | View |
| Password reset broken logic | View |
| Username enumeration via different responses | View |
| 2FA broken logic | View |
| Brute-forcing a stay-logged-in cookie | View |
| Offline password cracking | View |
| Password brute-force via password change | View |
| Password reset poisoning via middleware | View |
| Username enumeration via account lock | View |
| Username enumeration via response timing | View |
| Username enumeration via subtly different responses | View |
| Broken brute-force protection, IP block | View |
| Broken brute-force protection, multiple credentials per request | View |
13 items under this folder.