PortSwigger Walkthrough - 2FA Broken Logic
Walkthrough of PortSwigger's '2FA Broken Logic' lab.
Write-ups / Tag
authentication
12 write-ups with this tag.
PortSwigger Walkthrough - 2FA Simple Bypass
Walkthrough of PortSwigger's '2FA Simple Bypass' lab.
PortSwigger Walkthrough - Broken brute-force protection, IP block
Walkthrough of PortSwigger's 'Broken brute-force protection' lab.
PortSwigger Walkthrough - Brute-forcing a stay-logged-in cookie
Walkthrough of PortSwigger's 'Brute-forcing a stay-logged-in cookie' lab.
PortSwigger Walkthrough - Offline password cracking
Walkthrough of PortSwigger's 'Offline password cracking' lab.
PortSwigger Walkthrough - Password brute-force via password change
Walkthrough of PortSwigger's 'Password brute-force via password change' lab.
PortSwigger Walkthrough - Password reset broken logic
Walkthrough of PortSwigger's 'Password reset broken logic' lab.
PortSwigger Walkthrough - Password reset poisoning via middleware
Walkthrough of PortSwigger's 'Password reset poisoning via middleware' lab: steal a reset token by spoofing the X-Forwarded-Host header.
PortSwigger Walkthrough - Username enumeration via account lock
Walkthrough of PortSwigger's 'Username enumeration via account lock' lab.
PortSwigger Walkthrough - Username enumeration via different responses
Walkthrough of PortSwigger's 'Username enumeration via different responses' lab.
PortSwigger Walkthrough - Username enumeration via response timing
Walkthrough of PortSwigger's 'Username enumeration via response timing' lab.
PortSwigger Walkthrough - Username enumeration via subtly different responses
Walkthrough of PortSwigger's 'Username enumeration via subtly different responses' lab.