Live Hacking Night - Day04 - Authentication Vulnerabilities — Part II (Sinhala) | Web Security
In this Stream Recording of Late Hacking Night Day 04 (Sinhala), we explore Authentication Vulnerabilities Part II with practical labs from PortSwigger.
Topics Covered:
Exploiting vulnerabilities in multi-factor authentication
Cross Site Scripting (XSS) and Cookie Stealing with XSS
Encoding, Encrypting, Hashing and Rainbow Table attack
Exploiting Password Reset Tokens
Exploiting Logic flaws in Password reset, change mechanisms
Labs Demonstrated:
2FA Simple Bypass
2FA Broken Logic
Bruteforcing a stay-logged-in cookie
Password Reset Broken Logic
Password Reset Poisoning via Middleware
Offline Password Cracking
Password Brute-Force via Password Change
Broken brute-force protection, multiple credentials per request
💬 Join Heshan Streams WhatsApp Channel for live notifications and events :
https://bit.ly/heshanpererawhatsapp
🌍 Websites :
Main : https://destinyoo.com
Blog : https://blog.destinyoo.com
Portfolio : https://about.destinyoo.com
🎙️ Daily Streams and Content :
/ @heshankperera
‼️ Disclaimer: This content is for educational purposes only. I do not take responsibility for misuse. All material is freely available for those who love cybersecurity, use responsibly and ethically.
#cybersecurity #webhacking #CTF #portswiggerlabs #sinhala