🧠 Info
This lab’s two-factor authentication (2FA) can be bypassed.
You already have valid credentials, but you do not have access to the 2FA verification code.
🎯 Goal
Solve the lab by accessing Carlos’s account page.
- 👤 Your Credentials:
wiener:peter
- 🎯 Victim's Credentials:
carlos:montoya
🧪 Let’s Solve the Lab – It’s Easy!
🚀 Step-by-Step:
- Open the lab and click on “My Account”
- Login using your own credentials:
wiener : peter
- Once logged in, click on the “Email client” button
📧 Access the Email Client
- Go to your account page
- Copy and save the full URL of the
/my-account page*(you’ll use this URL to bypass 2FA later)*
🎭 Now Use Victim’s Credentials