During this video we look at the scenario where an attacker bypass a broken 2FA mechanism to login into the victim user account entirely based on the victim username and without knowing the password.
NOTE: This video is made ONLY for educational purposes and to help developers and security researchers to enhance their security knowledge. Therefore, allowing them remediate potential vulnerabilities in their OWN applications.
Web Security Academy | Lab: 2FA broken logic:
portswigger.net/web-security/...
Twitter: / tracethecode
24 апр 2022
