IntermediateFREE16 hours
What Is Authentication?
// VULNERABLE: Direct use without allow-list
Enroll for free to track your progress through this course.
Curriculum (31 lessons)
- 1. What Is Authentication?
- 2. How Do Authentication Vulnerabilities Arise?
- 3. What Is the Impact of Vulnerable Authentication?
- 4. Vulnerabilities in Authentication Mechanisms a Website'S Authentication System Usually Con
- 5. Preventing Attacks on Your Own Authentication Mechanisms
- 6. Vulnerabilities in Password-Based Login
- 7. Brute-Force Attacks a Brute-Force Attack Is When an Attacker Uses a System of Trial and Er
- 8. Flawed Brute-Force Protection
- 9. HTTP Basic Authentication
- 10. Vulnerabilities in Multi-Factor Authentication
- 11. Two-Factor Authentication Tokens
- 12. Bypassing Two-Factor Authentication
- 13. Flawed Two-Factor Verification Logic
- 14. Brute-Forcing 2FA Verification Codes
- 15. Vulnerabilities in Other Authentication Mechanisms
- 16. Keeping Users Logged in a Common Feature Is the Option to Stay Logged in Even After Closin
- 17. Resetting User Passwords
- 18. Changing User Passwords
- 19. How to Secure Your Authentication Mechanisms
- 20. Take Care with User Credentials
- 21. Don'T Count on Users for Security
- 22. Prevent Username Enumeration
- 23. Implement Robust Brute-Force Protection
- 24. Triple-Check Your Verification Logic
- 25. Don'T Forget Supplementary Functionality
- 26. Implement Proper Multi-Factor Authentication
- 27. Exploit / Test with Curl (Detailed)
- 28. Authentication Lab Passwords
- 29. Best Practices & Detailed Takeaways — Authentication
- 30. App.Py — VULNERABLE
- 31. Broken Authentication