Broken Authentication -> Weak Password

Broken Authentication -> Weak Password

A weak password is short, common, a system default, or something that could be rapidly guessed by executing a brute force attack using a subset of all possible passwords.

Exploitation

In this case,we will try to login as admin with this credential admin:admin.

Let’s click on login and see if we can login as admin.

Great!, We were able to guess admin credential.

Mitigations

• Enforce Passwords Policy.

References

• https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html