Broken Authentication

Sections

Introduction to Authentication

• What is Authentication
• Attacks on Authentication

Brute-Force Attacks

• Enumerating Users
• Brute-Forcing Passwords
• Brute-Forcing Password Reset Tokens
• Brute-Forcing 2FA Codes
• Weak Brute-Force Protection

Password Attacks

• Default Credentials
• Vulnerable Password Reset

Authentication Bypasses

• Authentication Bypass via Direct Access
• Authentication Bypass via Parameter Modification

Session Attacks

• Attacking Session Tokens
• Further Session Attacks

Skills Assessment

• Skills Assessment - Broken Authentication