Username enumeration via account lock
Laboratorio de Portswigger sobre Authentication Vulnerabilities
Justice-Reaper
Broken brute-force protection, IP block
Laboratorio de Portswigger sobre Authentication Vulnerabilities
Username enumeration via response timing
Laboratorio de Portswigger sobre Authentication Vulnerabilities
Username enumeration via subtly different responses
Laboratorio de Portswigger sobre Authentication Vulnerabilities
Password reset broken logic
Laboratorio de Portswigger sobre Authentication Vulnerabilities
2FA simple bypass
Laboratorio de Portswigger sobre Authentication Vulnerabilities
Username enumeration via different responses
Laboratorio de Portswigger sobre Authentication Vulnerabilities
DOM based cookie manipulation
Laboratorio de Portswigger sobre DOM Based Vulnerabilities
DOM based open redirection
Laboratorio de Portswigger sobre DOM Based Vulnerabilities
DOM XSS using web messages and JSON.parse
Laboratorio de Portswigger sobre DOM Based Vulnerabilities