Pasindu's Blog

Home

❯

PortSwigger Labs

❯

Authentication

Authentication

Jun 22, 20261 min read

Authentication - PortSwigger Practice Lab



10 items under this folder.

  • Jul 05, 2026

    2FA broken logic

    • PortSwigger
  • Jul 05, 2026

    Broken brute-force protection, IP block

    • PortSwigger
  • Jul 05, 2026

    Broken brute-force protection, multiple credentials per request

    • PortSwigger
  • Jul 05, 2026

    Brute-forcing a stay-logged-in cookie

    • Jul 05, 2026

      Offline password cracking

      • PortSwigger
    • Jul 05, 2026

      Password brute-force via password change

      • PortSwigger
    • Jul 05, 2026

      Password reset broken logic

      • PortSwigger
    • Jul 05, 2026

      Password reset poisoning via middleware

      • PortSwigger
    • Jul 05, 2026

      Username enumeration via response timing

      • PortSwigger
    • Jul 05, 2026

      Username enumeration via subtly different responses

      • PortSwigger

    Created with Quartz v4.5.2 © 2026

    • GitHub
    • Discord Community