Back to directory

WRITEUP #1495

Account Takeover worth of $5

OAuthAccount takeover

by@gonzxph(Jefferson Gonzales)

Program

-

Published

Feb 26, 2023

Added to HackDex

Feb 28, 2023

Read Full Writeuphttps://gonzxph.medium.com/account-takeover-worth-of-5-dba784b32383

▸ RELATED WRITEUPS

Stealing First Party Access Token of Facebook Users: Meta Bug Bounty

OAuthAccount takeover

Self XSS + Login CSRF + OAuth = Account Takeover

Auth BypassAccount takeover

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Self-XSS to ATO via Site Features

How I Got $250 For My Second Bug on HackerOne

OAuthSession expiration issue

Built with ❤️ by Shubham Rawat