During video we see how a weak protection against brute force attacks allows an attacker to automate a multi-step authentication process and successfully brute force verification code to bypass 2 factor authentication and log into the victim account.

Web Security Academy | Lab: 2FA bypass using a brute-force attack
https://portswigger.net/web-se....curity/authenticatio

NOTE: This video is made ONLY for educational purposes and to help developers and security researchers to enhance their security knowledge. Therefore, allowing them remediate potential vulnerabilities in their OWN applications.

Twitter: https://twitter.com/tracethecode