Academy
Practitioner track

Authentication Flaws

Spraying, lockouts, and reset tokens: where login logic breaks.

Create a free account to track progress and earn the certificate. You can read the syllabus below without one.

Final exam

3 questions in 10 minutes, 3 to pass. Certificates require it.

Take the exam
  1. 01How logins breakBrute force is noisy. Spraying is quiet. Logic flaws skip both.
  2. 02Lab: under the lockout radarPer-username lockouts stop hammering. Spray common passwords instead.
  3. 03Authentication quizThree questions on spraying, MFA, and reset hygiene.