Broken Authentication Skills-Assessment

Hello all! I’m having a lot of trouble with the Skills Assessment in this chapter. So far I have enumerated users, generated a password list and applied it to all users, and have decyphered the cookies, but I am getting nowhere. None of the passwords worked, and I’m not sure what to do with the cookies. I’d appreciate any hints or nudges you guys have!

Assuming that you have all the right users, have you tried finding the rules surrounding the password complexity?

Feel free to DM me.

1 Like

Just sent you a message! Thanks so much

I tried to use a script to blast, but it was unsuccessful. How did you write your password enumeration script?