WRITEUP #1002

How i was able to get Account Takeover via Insecure Data Storage and WebView With Exported Activity

Auth BypassAccount takeoverAndroidWebviewInsecure data storageFirebase

by@M0x0101(Mohamed Reda)

Program

Published

Jul 1, 2023

Added to HackDex

Jul 3, 2023

Read Full Writeuphttps://medium.com/@M0X0101/how-i-was-able-to-get-account-takeover-via-insecure-data-storage-and-webview-with-exported-activity-5308a330ab80

▸ RELATED WRITEUPS

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

Forced SSO Session Fixation

Auth BypassSSO

Account takeover on 8 years old public program

Auth BypassAccount takeover

$500 for Cracking Invitation Code For Unauthorized Access & Account Takeover

Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat