Broken Authentication TryHackMe | Owasp Top 10 [Dragable & Resizeable ]

Now I am picking on the surface for Broken Authentication, this was quite good for me to do some recap.

Though I didnt felt besides the theory I probably could consume this for example hack the box.

The examples are way to high level.

​​​​​​​

 Broken Authentication Via Cookie

this was another example by just switch when intercept the request user to admin also the uid from 25 to 1.

Notice the username didnt actually not matter what I had the logic behind was only the uid so I could make use of any account.

​​​​​​​

the next step was to do a practice where we used webgoat

and in first place we was enumerating the username by a wordlist

then  /usr/share/wordlists/metasploit/http_default_users.txt

quite simple the thing was when the attack was completed besides we intercept the request we modified the payload.

then we was looking for unique lengh in the attacklist.

below is an example how we did it for forgot password challange:

​​​​​​​

Session Fixation Challenge

Next example was more useful and made me wake some thoughts about som weak sites I am aware of:

​​​​​​​