Scribd Logo
Upload

Welcome to Scribd!

  • Basic Auth

    Uploaded by

    student
    11 views1 page
    This document discusses challenges around broken authentication and provides instructions to find and exploit administrative login credentials. It notes that broken authentication is widespread due to issues with identity and access controls. Attackers can manually detect and automatically exploit broken authentication using tools and password lists. The document then directs the user to use source code inspection to find and submit administrative login credentials.

    Original Description:

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document discusses challenges around broken authentication and provides instructions to find and exploit administrative login credentials. It notes that broken authentication is widespread due to issues with identity and access controls. Attackers can manually detect and automatically exploit broken authentication using tools and password lists. The document then directs the user to use source code inspection to find and submit administrative login credentials.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    11 views1 page

    Basic Auth

    Uploaded by

    student
    This document discusses challenges around broken authentication and provides instructions to find and exploit administrative login credentials. It notes that broken authentication is widespread due to issues with identity and access controls. Attackers can manually detect and automatically exploit broken authentication using tools and password lists. The document then directs the user to use source code inspection to find and submit administrative login credentials.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 1

    Challenge List

    Admin Login
    A2:2017-Broken Authentication

    WSTG-CONF-05 Enumerate Infrastructure and Application Admin Interfaces

    The prevalence of broken authentication is widespread due to the design and implementation of
    most identity and access controls. Session management is the bedrock of authentication and
    access controls, and is present in all stateful applications.
    Attackers can detect broken
    authentication using manual means and exploit them using automated tools with password lists
    and dictionary attacks.

    Use your powers of page source observation and find admin password and login.

    Login as admin user

    User Name :
    Password :
    Submit

    You might also like