Thread by @steiner254

Day 0⃣3⃣/2⃣0⃣ -- [How To Hack A Login Page!]
➡️ Day 3, How To Hack A Login Page "Exploiting Vulnerabilities On A Login Page"
➡️ Below are Tips & References (Feel Free To Share)🧵🧵👇👇
#BugBounty
#bugbountytips
#cybersecuritytips

1/n
10 Common vulnerabilities found in the login functionality
redhuntlabs.com/blog/10-most-c…

2/n
Portswigger vulnerabilities on password based login
portswigger.net/web-security/a…

3/n
Login CSRF
CC: Login CSRF using Twitter OAuth
hackerone.com/reports/2228

4/n
BlackHat Cookie Hijacking

5/n
Open Redirect Vulnerability on Login Page
medium.com/@nnez/1st-bug-…

6/n
Account Takeover using multiple vulnerabilities

7/n
Reflected XSS after login

8/n
COMMAND INJECTION REPORTED FOR LOGIN PASSWORD FIELD
ibm.com/support/pages/…

9/n
5 ways attackers can bypass two-factor authentication
hoxhunt.com/blog/5-ways-to…

10/n
OTP Bypass - No Rate Limit

11/n
OTP Bypass Via Response Manipulation

12/n
Login Dialogue Bypass via Password Spray / Brute Force Attack by @_zwink

13/n
Sql 1njection on Login Page

14/n
Admin Password via SQL Injection Vulnerability

15/n
Weak login function - over http

16/n
Admin panel login Bypass

17/n

https://twitter.com/Steiner254/status/1546344572565028864?s=20&t=FeuM-rwt6UtYGvF62qY8Dg

18/n

https://twitter.com/Steiner254/status/1546346607393775617?s=20&t=FeuM-rwt6UtYGvF62qY8Dg

n/n
Practice Makes Perfect!
Have a lovely weekend, Don't Drink & Drive!
Happy Hacking :)
See you here same time tomorrow!