Series

PortSwigger Authentication Labs

Throughout this series, I'll explore the effective utilization of the Burp Suite application from PortSwigger Academy, offering valuable insights into honing reconnaissance and analysis skills.

Articles in this series

Lab: Password reset poisoning via middleware

Jan 29, 20242 min read

Lab Scenario: Our mission is to investigate and exploit the password reset functionality of a simulated web application, demonstrating the risks...

Lab: Password reset poisoning via middleware

Lab: Username enumeration via response timing

Jan 3, 20243 min read

Introduction: In the intricate world of web security, identifying vulnerabilities is a skill every cybersecurity enthusiast must hone. This blog post...

Lab: Username enumeration via response timing

Lab: Username enumeration via subtly different responses

Jan 2, 20243 min read

Introduction: In the dynamic landscape of web security, the ability to identify vulnerabilities such as username enumeration is crucial. This blog...

Lab: Username enumeration via subtly different responses

Lab: Password reset broken logic

Jan 1, 20242 min read

Introduction: In the realm of web security testing, understanding vulnerabilities in password reset functionality is paramount. In this article, we...

Lab: Password reset broken logic

Lab: 2FA simple bypass

Dec 31, 20232 min read

Introduction: Two-factor authentication (2FA) is a widely adopted security measure, but like any system, it may have vulnerabilities. In this article,...

Lab: 2FA simple bypass

Lab: Username enumeration via different responses

Dec 31, 20232 min read

Introduction: When it comes to web application security testing, understanding the intricacies of Burp Suite and its various modules is crucial. In...

Lab: Username enumeration via different responses