Web Application Security

Walkthrough summary

Web Application Security TryHackMe walkthrough with 4 answered prompts and lab methodology notes.

Sample prompts covered

• What do you need to access a web application?
  Open the walkthrough page to inspect the full answer and command flow.
• You discovered that the login page allows an unlimited number of login attempts without trying to slow down the user or lock the account. What is the category of this security risk?
  Open the walkthrough page to inspect the full answer and command flow.
• You noticed that the username and password are sent in cleartext without encryption. What is the category of this security risk?
  Open the walkthrough page to inspect the full answer and command flow.
• Check the other users to discover which user account was used to make the malicious changes and revert them. After reverting the changes, what is the flag that you have received?
  Open the walkthrough page to inspect the full answer and command flow.