A React login and registration app with a Go API on MariaDB, whose forgotten-password flow asks two security questions. The flow reveals whether a login exists and accepts unlimited guesses at the answers.
Pas commencéDockercommit 7aa48b7x86_64 · aarch64Secret
Enumerate the application's users, then reset the admin's password through the recovery questions and log in as admin.
Le brief de ce lab se trouve dans son dépôt.