dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixing image

Browse Source
This commit is contained in:
Jason White 2017-07-18 17:54:50 -04:00
parent 9b643728f8
commit 89bfc3f12d
2 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
webgoat-lessons/auth-bypass/src/main/resources/images/paypal-2fa-bypass.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 125 KiB

2
webgoat-lessons/auth-bypass/src/main/resources/lessonPlans/en/2fa-bypass.adoc
View File

@ -4,7 +4,7 @@
A recent (2016) example (https://henryhoggard.co.uk/blog/Paypal-2FA-Bypass) is a great example of authentication bypass. He was unable to receive an SMS with a code, so he opted for the provided A recent (2016) example (https://henryhoggard.co.uk/blog/Paypal-2FA-Bypass) is a great example of authentication bypass. He was unable to receive an SMS with a code, so he opted for the provided
alternative method, which involved security questions. Using a proxy, removed the parameters entirely ... and won. alternative method, which involved security questions. Using a proxy, removed the parameters entirely ... and won.
image::images/paypal-2fa-bypass.png[Paypal 2FA bypass,936,432,style="lesson-image"] image::images/paypal-2fa-bypass.png[Paypal 2FA bypass,1397,645,style="lesson-image"]
=== The Scenario === The Scenario