Applied Network Security

Bypassing authentication

There are various bypassing authentication methods such as capturing tokens and replaying them, client-side piggybacking, and cross-site request forgery. Some common tools include the Burp Suite and THC-Hydra for brute forcing attacks for password cracking that we'll briefly consider. THC-Hydra is an effectively fast, free, and legal login cracker developed for cyber security researchers and professionals to show how easy and vulnerable it is bypass certain authentication. It does require for certain parameters to be met such as the address IP, URL, form type, a username field, a password field, and failure response. We'll also be using the Burp Suite as a proxy, for example, but you can use any. You can launch it ...