Username enumeration via account lock
Laboratorio de Portswigger sobre Authentication
Justice-Reaper
Broken brute-force protection, IP block
Laboratorio de Portswigger sobre Authentication
Username enumeration via response timing
Laboratorio de Portswigger sobre Authentication
Username enumeration via subtly different responses
Laboratorio de Portswigger sobre Authentication
Password reset broken logic
Laboratorio de Portswigger sobre Authentication
2FA simple bypass
Laboratorio de Portswigger sobre Authentication
Username enumeration via different responses
Laboratorio de Portswigger sobre Authentication
DOM-based cookie manipulation
Laboratorio de Portswigger sobre DOM Based
DOM-based open redirection
Laboratorio de Portswigger sobre DOM Based
DOM XSS using web messages and JSON.parse
Laboratorio de Portswigger sobre DOM Based