4

I am doing an authentication lab on portswigger which requires me to compare multiple HTTP requests and find a subtle difference between them in order to find a valid username. However, I dont know how to do this using OWASP ZAP. By any chance could someone help me with this? Thanks!

The lab im trying to do: https://portswigger.net/web-security/authentication/password-based/lab-username-enumeration-via-subtly-different-responses

What I am trying to do in ZAP: https://youtu.be/jJ_spcnCLr8?t=111

ilovepalydota
  • 49
  • 2

1 Answers1

5

When you setup ZAP's fuzzer setup the username payloads, goto the "Message Processors" tab. Remove "Payload Reflection Detector". Add "Tag Creator", set it to "Extract" set the "Regex" as warning>(Invalid.*)<. Run the fuzzer. Sort the results by the "State" column. Note one of the results is subtly different.

kingthorin
  • 1,419
  • 9
  • 18