Web · Authentication and Session 5

• Lesson 4.5: Password reset and MFA bypass Jun 15, 2024
• Lesson 4.4: OAuth2 and SSO, redirect_uri and state attacks Jun 15, 2024
• Lesson 4.3: Attacking JWT with alg none and weak secrets Jun 15, 2024
• Lesson 4.2: Session management, fixation, and guessable tokens Jun 15, 2024
• Lesson 4.1: Authentication flaws, brute force, and default credentials Jun 15, 2024