Back to directory

WRITEUP #1436

The story of becoming a Super Admin

Auth BypassHardcoded credentialsAccount takeoverInformation disclosure

by@omer_kepenek(Ömer Kepenek)

Program

-

Published

Mar 8, 2023

Added to HackDex

Mar 8, 2023

Read Full Writeuphttps://medium.com/@omerkepenek/the-story-of-becoming-a-super-admin-ab32db7dd1b3

▸ RELATED WRITEUPS

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

How 1 Exposed Honeywell API Gave us Control Over an Internal Engineering System

ReconMissing authentication

Forced SSO Session Fixation

Account takeover on 8 years old public program

Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat