htmlhack/hack-yourself-first-solutions: solutions of hack-yourself-first · GitHub

Name		Name	Last commit message	Last commit date
#0 READ ME		#0 READ ME
#01 Unprotected sensitive page		#01 Unprotected sensitive page
#02 "Password already in use by"		#02 "Password already in use by"
#03 Cookie Invalidation after logout		#03 Cookie Invalidation after logout
#04 Lack of security in change password		#04 Lack of security in change password
#05 Cookie Invalidation after changing password		#05 Cookie Invalidation after changing password
#06 IDOR in edit profile		#06 IDOR in edit profile
#07 Lack of verification on create account		#07 Lack of verification on create account
#08 Mass account creation		#08 Mass account creation
#09 Prvilege escalation using cookie		#09 Prvilege escalation using cookie
#10 Email spoofing		#10 Email spoofing
#11 Rate limit		#11 Rate limit
#12 Mass profile modifying using IDOR		#12 Mass profile modifying using IDOR
#13 No minimum password requirment		#13 No minimum password requirment
#14 reset password to lock out legit user		#14 reset password to lock out legit user
#15 reset password of all users		#15 reset password of all users
#16 Login CSRF		#16 Login CSRF
#17 Logout CSRF		#17 Logout CSRF
#18 Change password using CSRF		#18 Change password using CSRF
#19 Edit profile using CSRF		#19 Edit profile using CSRF
#20 Reset password using CSRF		#20 Reset password using CSRF
#21 Edit profile using Clickjacking		#21 Edit profile using Clickjacking
#22 No 2 Factor Authorization		#22 No 2 Factor Authorization
#23 SQL injection		#23 SQL injection