Chapter 1
Engagement Management
Course: Comptia Pentest Pt0 003
Subject: Comptia Pentest Plus
Chapter: Attacks And Exploits
Authentication attacks exploit password weaknesses, authentication protocol vulnerabilities, and token-based security flaws to bypass security controls. Attackers leverage brute-force techniques, token manipulation, and misconfigurations to gain unauthorized access. Below are detailed explanations of each authentication attack, along with tools and defense strategies.
1. Attack Types
1. Multifactor Authentication (MFA) Fatigue Attack
MFA fatigue attacks exploit push notification-based MFA systems by overwhelming a victim with authentication requests until they approve one, granting the attacker access.
Attack steps:
- The attacker obtains valid credentials through phishing, credential stuffing, or data breaches.
- They repeatedly attempt to log in, generating continuous MFA push notifications.
- The victim, frustrated by the flood of notifications, accidentally or unknowingly approves the request.
- The attacker gains full access to the victim's account.
Tools used:
- Evilginx2 – Captures authentication tokens via phishing.
- MFA spamming scripts – Automates excessive login requests to overwhelm the victim.