Email authentication bypass

What is email Authentication ：

When you create an account then it （ account ） Want you 6 Bit code or 4 Bit code , Some people think so . Then you enter this code , Your email verification has completed successfully , You are now in your account .

But how to bypass the verification code ？

Now let's start , First , You create your account , You can type 6 Bit unknown / Random code , Because you can see that the code is invalid or someone thinks it is . Now you can use burp Request a response and change all errors l success , Invalid is valid and change the status code 403 un. To 200 OK And forward , Now it's easy to bypass your random verification code :)

Copy steps ：

1. Create your account

2. Enter any code and click validate （ You can see that the code is invalid ）

3. open burp Kit , Intercept request response

4. change

403 The United Nations .— ->200 normal

error ——-> success

Invalid code ——-> Valid code

5. Now forward and bypass your random code :)