Broken Authentication - 2FA Broken Logic - SOLVE WITH BURP COMMUNITY EDITION 

Support This Channel
======================
Please like and subscribe, it means a lot!
Please buy me a coffee so I can continue to make content.
buymeacoffee.c...
Join our Discord
/ discord
We take a look at an example of broken 2FA logic where it's possible to bypass the first step of the 2FA and brute force the second step of the 2FA.
This lab is not straightforward to solve without the pro edition of burp. This walkthrough provides a solution that allows users of burp community edition to solve the lab.
We make use of a custom bash/curl script and explain the difference between synchronous and concurrent http requests (aka "threads").