Bypass OTP Schema:- → Response mnipulate → Bruteforce → Sms forwarding → Broken authentication we can use any random value Here, We will discuss about How attacker able to bypass OTP Schema by response manipulate technique . If You don’t know What is response manipulate is a technique attacker try to analyze Request using some proxy tool attacker can change value of Response without entering correct OTP. Steps Of Testing : 1. Here We have a vulnerable Application which allow us to Bypass OTP Schema That consist broken authentication schema. As when We login Or Sign up as authenticate some application ask for OTP Confirmation, As above picture when user enter OTP Confirmation Code which comes to User Email After entering OTP we can access as Authenticate user , 2. Here For checking Is application is vulnerable for OTP Bypass we will use some random OTP 0000 Value As above picture we Entered wrong OTP Value , Now, here we have to do before Click Verifiy Open Some proxy tool to inte...
Comments
Post a Comment