Back to directory
WRITEUP #1740

An amazing way to turn a xss into an ATO

XSSAccount takeover
byNaka
Program
-
Published
Jan 2, 2023
Added to HackDex
Jan 6, 2023
Read Full Writeuphttps://medium.com/@nakah_/an-amazing-way-to-turn-a-xss-into-an-ato-40bc92772195
▸ RELATED WRITEUPS
Self-XSS to ATO via Site Features
XSSSelf-XSS
Interesting Story of an Account Takeover Vulnerability
Auth BypassAccount takeover
How 100% Manual Hacking (Without Even Kali And Burp) Led To 2 Medium Vulnerabilities On YesWeHack
XSS
Basic HTTP Authentication Risk: Uncovering pyspider Vulnerabilities
XSSReflected XSS
Bypassing CSP via URL Parser Confusions : XSS on Netlify’s Image CDN
XSSCSP bypass

Built with ❤️ by Shubham Rawat