Is it possible to 2fa verification?
-
As I mentioned in the title is it possible to switch to 2fa with auth token ?
-
do you mean bypass the 2FA??
-
@Fairy Yes is possible with auth token ?
-
it shouldn't be possible unless the website or API has a vulnerability. as far as i know, i faced this vulnerability in a website where you can bypass the 2FA with a constant Cookie, yet every website differs from the other.
refer to this article for more information.
https://book.hacktricks.xyz/pentesting-web/2fa-bypass
