Lab link. When we send the request, we see that it goes in JSON format and if we make a certain number of mistakes, we are blocked from IP. By sending more than one password in the JSON structure, we…
Lab link. Certain suspicious accounts can be locked by the system. In this lab, our goal is to find the username first and then the password. We don’t get any time block when we make a few wrong attempts. We…
Lab link. We need to find the password for the user carlos. We know there is a logic flaw, so let’s make a few false entries and try to understand the system. After 3 login attempts, the system displays “You…
Lab link. Lab gave us the information “This lab is vulnerable to username enumeration using its response times.” At first, we log in with the wiener:peter credentials given to us on the login page We have successfully logged in and…