Back to directory

WRITEUP #1333

Simple Bugs 0x01: Password Changing to Account Takeover!

Auth BypassAccount takeoverCSRF

by@egl_falcao(Vitor Falcao)

Program

-

Published

Apr 3, 2023

Added to HackDex

Apr 6, 2023

Read Full Writeuphttps://vitorfalcao.com/posts/simple-bugs/password-changing-to-ato/

▸ RELATED WRITEUPS

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

CSRF Bypass Using Domain Confusion Leads To ATO

CSRFAccount takeover

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

Forced SSO Session Fixation

Account takeover on 8 years old public program

Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat