Javascript authentication¶

root-me challenge: Javascript - Authentication

http://challenge01.root-me.org/web-client/ch9/login.js

Techniques¶

• Broken access control

• Access control testing runbook

Counter moves¶

Javascript authentication is the variant in play. A client-side finding still needs a server-side control behind it. The defender’s view can be found in the blue notes on the application layer as a target.