Entries by Vasilis Flengas

MFA Bypass Techniques

MFA Bypass Techniques: How Attackers Get Past Multi-Factor Authentication Multi-factor authentication (MFA) has become a cornerstone of modern application security. When implemented correctly, it adds a significant barrier between an attacker and a compromised account. When implemented poorly, however, it gives users a false sense of security while offering little real protection. During web application […]

Token Auto-Refresher: Solving Auth Failures in Burp Suite

Intro Modern web application security testing increasingly relies on automated scanning tools to identify vulnerabilities efficiently. However, as a team, we consistently faced a persistent challenge with bearer token expiration during automated scans. When tokens expired mid-scan, our automated tools encountered authentication failures, resulting in incomplete coverage and requiring manual intervention to update tokens and […]