Chapter

Breaking Weak Passwords in Websites
listen on Spotify
33:19 - 44:05 (10:45)

The weak password policies of a website can be exploited by hackers to gain access to user accounts by resetting their passwords, especially if the website generates short passwords.

Clips
A website's weak password policy that only generates five-character passwords made it vulnerable to brute force attacks, allowing hackers to gain access to user accounts by resetting their passwords and guessing the five-character password generated by the site.
33:19 - 35:52 (02:32)
listen on Spotify
Password Security
Summary

A website's weak password policy that only generates five-character passwords made it vulnerable to brute force attacks, allowing hackers to gain access to user accounts by resetting their passwords and guessing the five-character password generated by the site.

Chapter
Breaking Weak Passwords in Websites
Episode
130: Jason's Pen Test
Podcast
Darknet Diaries
A website owner purposefully kept the password complexity weak to provide less friction for users, leading to security vulnerabilities that could be exploited by hackers.
35:52 - 40:24 (04:31)
listen on Spotify
Cybersecurity
Summary

A website owner purposefully kept the password complexity weak to provide less friction for users, leading to security vulnerabilities that could be exploited by hackers. This emphasizes the importance of strong password requirements to protect user accounts.

Chapter
Breaking Weak Passwords in Websites
Episode
130: Jason's Pen Test
Podcast
Darknet Diaries
A recently discovered SQL injection bug in an online store allowed cybercriminals to access the entire database of customer purchases and credit card data.
40:24 - 44:05 (03:40)
listen on Spotify
Cybersecurity
Summary

A recently discovered SQL injection bug in an online store allowed cybercriminals to access the entire database of customer purchases and credit card data. Many high-profile individuals utilizing the site were found to be compromised by the bug.

Chapter
Breaking Weak Passwords in Websites
Episode
130: Jason's Pen Test
Podcast
Darknet Diaries