RedSec
28 lessons

Authentication

Login flows, sessions, reset logic, MFA, OAuth, and identity mistakes.

  1. 001 Password reset flow review Learn Password reset flow review through a safe, repeatable authentication workflow. intro tutorial 20 min
  2. 002 Session fixation concepts Learn Session fixation concepts through a safe, repeatable authentication workflow. intro tutorial 20 min
  3. 003 MFA enrollment and recovery Learn MFA enrollment and recovery through a safe, repeatable authentication workflow. intro tutorial 20 min
  4. 004 OAuth authorization code flow Learn OAuth authorization code flow through a safe, repeatable authentication workflow. intro tutorial 20 min
  5. 005 OpenID Connect token basics Learn OpenID Connect token basics through a safe, repeatable authentication workflow. intro tutorial 20 min
  6. 006 Account enumeration signals Learn Account enumeration signals through a safe, repeatable authentication workflow. intro tutorial 20 min
  7. 007 Login throttling and lockouts Learn Login throttling and lockouts through a safe, repeatable authentication workflow. intro reference 12 min
  8. 008 Remember-me token risks Learn Remember-me token risks through a safe, repeatable authentication workflow. intro tutorial 20 min
  9. 009 Device trust and session management Learn Device trust and session management through a safe, repeatable authentication workflow. core lab 30 min
  10. 010 SSO misconfiguration review Learn SSO misconfiguration review through a safe, repeatable authentication workflow. core tutorial 20 min
  11. 011 Credential stuffing defenses Learn Credential stuffing defenses through a safe, repeatable authentication workflow. core tutorial 20 min
  12. 012 Password policy review Learn Password policy review through a safe, repeatable authentication workflow. core tutorial 20 min
  13. 013 Password reset token entropy Learn Password reset token entropy through a safe, repeatable authentication workflow. core tutorial 20 min
  14. 014 Password reset token lifetime Learn Password reset token lifetime through a safe, repeatable authentication workflow. core reference 12 min
  15. 015 Password reset host header issues Learn Password reset host header issues through a safe, repeatable authentication workflow. core tutorial 20 min
  16. 016 Email verification bypasses Learn Email verification bypasses through a safe, repeatable authentication workflow. core tutorial 20 min
  17. 017 Magic link login review Learn Magic link login review through a safe, repeatable authentication workflow. core tutorial 20 min
  18. 018 MFA code replay testing Learn MFA code replay testing through a safe, repeatable authentication workflow. core lab 30 min
  19. 019 MFA backup code handling Learn MFA backup code handling through a safe, repeatable authentication workflow. core tutorial 20 min
  20. 020 MFA fatigue and prompt review Learn MFA fatigue and prompt review through a safe, repeatable authentication workflow. core tutorial 20 min
  21. 021 Session cookie rotation Learn Session cookie rotation through a safe, repeatable authentication workflow. core reference 12 min
  22. 022 Session logout invalidation Learn Session logout invalidation through a safe, repeatable authentication workflow. core tutorial 20 min
  23. 023 Refresh token rotation Learn Refresh token rotation through a safe, repeatable authentication workflow. core tutorial 20 min
  24. 024 OAuth redirect URI review Learn OAuth redirect URI review through a safe, repeatable authentication workflow. core tutorial 20 min
  25. 025 OAuth state parameter review Learn OAuth state parameter review through a safe, repeatable authentication workflow. core tutorial 20 min
  26. 026 OAuth PKCE basics Learn OAuth PKCE basics through a safe, repeatable authentication workflow. advanced tutorial 35 min
  27. 027 SAML assertion review basics Learn SAML assertion review basics through a safe, repeatable authentication workflow. advanced lab 45 min
  28. 028 Account linking mistakes Learn Account linking mistakes through a safe, repeatable authentication workflow. advanced reference 12 min