Burp Suite User Forum

Create new post

Lab: OAuth account hijacking via redirect_uri

Oliver | Last updated: Feb 24, 2023 10:08AM UTC

The username and password detailed in the lab description wiener:peter don't seem to work for this lab. I tried many times using the password specified but I still get "Invalid username/email or password." Is this a bug? What is the correct username and password please? Thanks

Ben, PortSwigger Agent | Last updated: Feb 24, 2023 01:18PM UTC

Hi Oliver, I have just tested this particular lab and the credentials do appear to be working. Just to clarify, you are using 'wiener' as the username and 'peter' as the password?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.