Web Application Security

CHALLENGE INFORMATION

Platform: TryHackMe
Path: Introduction to Cyber Security
Module: Introduction To Offensive Security
Room: Web Application Security
Description: Learn about web applications and explore some of their common security issues.

Introduction

Question 1: What do you need to access a web application?

Browser

Web Application Security Risks

Question 1: You discovered that the login page allows an unlimited number of login attempts without trying to slow down the user or lock the account. What is the category of this security risk?

Identification and Authentication Failure

Question 2: You noticed that the username and password are sent in cleartext without encryption. What is the category of this security risk?

Cryptographic Failures

Practical Example of Web Application Security

Question 1: Check the other users to discover which user account was used to make the malicious changes and revert them. After reverting the changes, what is the flag that you have received?

<redacted-flag>