🧠 Info
This lab’s two-factor authentication (2FA) is vulnerable due to a logic flaw in how it handles verification.
🎯 Goal
Access Carlos's account page to solve the lab.
- 👤 Your Credentials:
wiener:peter
- 🎯 Victim’s Username:
carlos
- 📧 You also have access to the email server to receive your own 2FA codes
💡 Hint: Carlos will not attempt to log in himself.
🧪 Step-by-Step Walkthrough
🔧 Part 1 – Normal Login (Baseline)
- 🔁 Open FoxyProxy
- 🔐 Login with:
wiener : peter
- 📩 Go to the Email Client and retrieve your 2FA code
- ✅ Paste the code and log in successfully
- Open Burp Suite →
Proxy > HTTP History
- 📥 Find the
GET /login2 request
- 📤 Send it to Repeater
- ✏️ Change the parameter:
username=wiener → username=carlos