+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: HELP Bypass two factor log in/Login Verfication Origin/EA etc. (/showthread.php?tid=5145586)
HELP Bypass two factor log in/Login Verfication Origin/EA etc. - chriswynne - Jan 24, 2016
Hi,
Can anyone help me out bypassing websites that use log in verification systems where a verification number is needed, either sent via text or email. For example Origin/Fifa use this feature. I know there definitely must be a way to bypass this feature, as I know if i was to use firefox a few months back the verification page was never presented after logging in, whilst google chrome and IE and phone app still sent me to the login verification, however all three browsers now send me to the login verification asking to send code to phone etc.
Here is the a screenshot that the verification system generates
i.gyazo.com/2b6910c739cbc2e6ecaf7a0a382ac1ec.png
I woould like know whether there is a browser that will bypass the security feature or whether there is a tool i could run/ block the security feature. If someone knows how to do this and wont share i for free, im willing to pay.
Thanks fo your help in advance
* - How2Hacks - Jan 24, 2016
Delete cookies and retry.
* - chriswynne - Jan 25, 2016
No its not coookies, its part of their security, im wondering whether theres a way to bypass it, such as editing page source code then pressing contnue, tricking the page thinking securiity code has been entered.
* - Frosteh - Jan 25, 2016
It's not standard practice to disable 2 factor auth for things like certain browsers, otherwise it weakens the whole system. It's likely that whatever behavior you're seeing isn't quite what you think it is.
2 factor auth is specifically designed to add more security to authentication, it's normally optional but once enabled there's no way to bypass it, otherwise it would be useless in the first place. If you want to break 2 factor auth you need to compromise the 2nd authentication method, a lot of the time it's by txt messages which if you stop by the wifi/network forum section there's information on spying on that kind of info.
Typically it would be easier to RAT a user and hijack a system already authed or connected rather than break the authentication.