إنتقل إلى المحتوى الرئيسي

Web Authentication Attacks

40 hours 7 Modules 20+ Labs Intermediate to Advanced

Course Description​

Authentication is the gateway to applications. Learn to attack OAuth, SAML, JWT, and other authentication mechanisms.

Course Structure​

Modules​

Module 1: Authentication Fundamentals (5h)​

  • Authentication types
  • Session management
  • Token-based auth
  • Multi-factor auth

Module 2: Password Attacks (6h)​

  • Brute force techniques
  • Password spraying
  • Credential stuffing
  • Password reset flaws

Module 3: OAuth/OIDC Attacks (7h)​

  • OAuth flow analysis
  • State parameter bypass
  • Token theft
  • Scope manipulation
  • Redirect URI manipulation

Module 4: SAML Attacks (6h)​

  • SAML basics
  • Signature bypass
  • XXE in SAML
  • Assertion manipulation

Module 5: JWT Attacks (6h)​

  • Algorithm confusion
  • Signature bypass
  • Key confusion
  • Token hijacking

Module 6: Session Management (5h)​

  • Session fixation
  • Session hijacking
  • Cookie attacks
  • Token reuse

Module 7: MFA Bypass (5h)​

  • OTP bypass
  • SMS interception
  • App vulnerabilities
  • Backup code abuse

Tools​

ToolPurpose
Burp SuiteRequest analysis
jwt_toolJWT testing
SAMLRaiderSAML testing
HydraBrute force