Authentication Vulnerabilities - Lab #14 2FA bypass using a brute-force attack | Long Version

In this video, we cover Lab #14 in the Authentication module of the Web Security Academy. This lab's two-factor authentication is vulnerable to brute-forcing. You have already obtained a valid username and password, but do not have access to the user's 2FA verification code. To solve the lab, we brute-force the 2FA code and access Carlos's account page. ▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬ Buy my course: https://academy.ranakhalil.com/p/web-... ▬ 📚 Contents of This Video 📚 ▬▬▬▬▬▬▬▬▬▬ 00:00​​​ - Introduction 00:11 - Web Security Academy Course (https://bit.ly/30LWAtE) 01:22 - Navigation to the exercise 01:53 - Understand the exercise and make notes about what is required to solve it 03:00 - Exploit the lab using Burp Suite Professional 10:38 - Summary 11:05 - Thank You ▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬ Notes.txt document: https://github.com/rkhal101/Web-Secur... Web Security Academy Lab Exercise: https://portswigger.net/web-security/... Rana's Twitter account:   / rana__khalil