Bypass OTP using http header.
Whenever I do pentesting, I always look backend because the developer experience helps me in Pentesting. I can understand the problem of developer because they have fixed time-line to deliver product or service. But the same case in Pentesting too :). I have bypass OTP using http headers such as origin and referer. Let’s understand what is origin and referer in simple language. The Origin request header indicates where a fetch originates from. It doesn't include any path information. example : Origin : https://xyz.com. The refereheader is a request-type header that identifies the address of the previous web page, which is linked to the current web page or resource being originated. Example : referer: http://xyz.com/abc.jsp. As per my experience in web development, I have seen that for 2FA there are common name for pages such as OTP.jsp, Validation.jsp, otpvalidate.jsp, otp_validation.jsp etc. So, basically behind the otp.jsp, otp_validation.jsp will perform authentication and ...