search

hcm444 / animal-farm

A new messageboard
MIT License
1 stars 3 forks source link

Potential Brute Force Vulnerability #14

Closed hcm444 closed 1 year ago

hcm444 commented 1 year ago

Hackers could potentially brute force attack accounts, passwords are encrypted with SHA-256.

Pulkitxm commented 1 year ago

Can I get assigned? let me know how to start.

AswanthJabba commented 1 year ago

A simple solution would be to add password restrictions for users while registering - such as length to be atleast 10 and must contain atleast one lowercase letter, atleast one uppercase letter, atleast one number and atleast one special character.

image

hcm444 commented 1 year ago

If you can implement this that would be great! Please look at the defined tables from your local test of the site. Go ahead and check it out if you can solve it I believe in you.

hcm444 commented 1 year ago

Big thanks to Bchass And AswanthJabba!