BROKEN AUTHENTICATION(Ez Access to Admin Of a Site)

[652]

LEAVE A LIKE MATES THANKS

Started a New Shit Yesterday(Got a Hit That Very Moment)
Its Broken Authentication(OWASP TOP 10)
I wont be going much technical into it for all the public taken into consideration

It is a way to bypass the authentication in a website without entering the username/password .As the name says broken authentication means the authentication flow set by that website has some other way round to get in

Example: 1. www.xyz.com/admlogin has an authentication set
2. Inside that admin login there is a page like www.xyz.com/admlogin/editdetails.aspx
3. So Instead of going to /admlogin you directly went to the other URL and boom you are inside the admin login without having to enter the username and password(Thats just one basic example)

Now here is the website:

Hidden Content

You must register or login to view this content.

Here is the inside page URL: Just add /admin/home.php to the above URL and You are an admin with all the permissions

Note: You have the admin access to only those pages which are having broken authentication, Not to all
If you tracerse to any other page it might ask you the admin credentials cuz it is secured by this vulnerability

Telegram: https://t.me/candycainlobbies
Ad by brocain

[31]

thanks dd

[39]

hwllo

[9]

dddddddddddddd

[13]

thanks

[438]

LEAVE A LIKE MATES THANKS

Started a New Shit Yesterday(Got a Hit That Very Moment)
Its Broken Authentication(OWASP TOP 10)
I wont be going much technical into it for all the public taken into consideration

It is a way to bypass the authentication in a website without entering the username/password .As the name says broken authentication means the authentication flow set by that website has some other way round to get in

Example: 1. www.xyz.com/admlogin has an authentication set
2. Inside that admin login there is a page like www.xyz.com/admlogin/editdetails.aspx
3. So Instead of going to /admlogin you directly went to the other URL and boom you are inside the admin login without having to enter the username and password(Thats just one basic example)

Now here is the website:

Here is the inside page URL: Just add /admin/home.php to the above URL and You are an admin with all the permissions

Note: You have the admin access to only those pages which are having broken authentication, Not to all
If you tracerse to any other page it might ask you the admin credentials cuz it is secured by this vulnerability

insane

[11]

LEAVE A LIKE MATES THANKS

Started a New Shit Yesterday(Got a Hit That Very Moment)
Its Broken Authentication(OWASP TOP 10)
I wont be going much technical into it for all the public taken into consideration

It is a way to bypass the authentication in a website without entering the username/password .As the name says broken authentication means the authentication flow set by that website has some other way round to get in

Example: 1. www.xyz.com/admlogin has an authentication set
2. Inside that admin login there is a page like www.xyz.com/admlogin/editdetails.aspx
3. So Instead of going to /admlogin you directly went to the other URL and boom you are inside the admin login without having to enter the username and password(Thats just one basic example)

Now here is the website:

Here is the inside page URL: Just add /admin/home.php to the above URL and You are an admin with all the permissions

Note: You have the admin access to only those pages which are having broken authentication, Not to all
If you tracerse to any other page it might ask you the admin credentials cuz it is secured by this vulnerability

wooooooooow

[48]

LEAVE A LIKE MATES THANKS

Started a New Shit Yesterday(Got a Hit That Very Moment)
Its Broken Authentication(OWASP TOP 10)
I wont be going much technical into it for all the public taken into consideration

It is a way to bypass the authentication in a website without entering the username/password .As the name says broken authentication means the authentication flow set by that website has some other way round to get in

Example: 1. www.xyz.com/admlogin has an authentication set
2. Inside that admin login there is a page like www.xyz.com/admlogin/editdetails.aspx
3. So Instead of going to /admlogin you directly went to the other URL and boom you are inside the admin login without having to enter the username and password(Thats just one basic example)

Now here is the website:

Here is the inside page URL: Just add /admin/home.php to the above URL and You are an admin with all the permissions

Note: You have the admin access to only those pages which are having broken authentication, Not to all
If you tracerse to any other page it might ask you the admin credentials cuz it is secured by this vulnerability

thanks