Bypass Really Simple Security

Prompts and answers

• What is the class name that holds the important three functions discussed in the task?
  Rsssl_Two_Factor_On_Board_Api
• What is the function name that accepts user_id and login_nonce as arguments and validates them?
  check_login_and_get_user
• What email address is associated with the username admin (user_id 1)?
  admin@fake.thm
• What is the first name value for the username tesla (user_id 2)?
  Jack
• What is the HTTP method required for exploiting the vulnerability? (GET/POST)
  POST
• As a security engineer, you have identified a call to the /reallysimplessl/v1/two_fa/skip_onboarding endpoint from weblogs. Does that confirm that the user is 100% infected? (yea/nay)
  nay