Pentest Lab - Choose Your Entry Point

Credentials: admin / easypassword

OTP Seed: XVQ2UIGO75XRUKJO

Header: secret-header: my-secret-header

Cookie: secret-cookie: my-secret-cookie

# WEB:

Web Authentication Forms:

• 1. Login (User + Pass) - (SQLi Bypass)
• 2. Login + 2FA (User + Pass + OTP)
• Logout

Required objects pages:

• Requires Basic Auth
• Requires Session var - 'logged_in': true
• Requires Session var - '2fa_logged_in': true
• Requires Header - 'secret-header': 'my-secret-header'
• Requires Cookie - 'secret-cookie'='my-secret-cookie'

Original Vulnerable Tools:

• Ping Tool (Command Injection)
• User Search API (SQL Injection)

# API:

OpenAPI

• Interactive API Documentation (Swagger UI)
• OpenAPI JSON file

Tools

• All HTTP Methods. Echo JSON with: headers, query paramenters and body
• GET|POST /api/v1/otp?seed=XVQ2UIGO75XRUKJO - returns JSON [OTP code, time_remaining, b32_seed]

Testing

• GET /api/v1/header-cookie (Requires secret header + cookie)
• GET /api/v1/header-cookie-auth (Requires Basic Auth + secret header + cookie)