Back to directory

WRITEUP #1910

Blog post

Auth BypassRegexAccount takeoverOpen redirectWeb cache deceptionBuffer OverflowOAuthNormalization

by@0xacb(André Baptista)

Program

-

Published

Nov 21, 2022

Added to HackDex

Nov 23, 2022

Read Full Writeuphttps://0xacb.com/2022/11/21/recollapse/

▸ RELATED WRITEUPS

Self XSS + Login CSRF + OAuth = Account Takeover

Auth BypassAccount takeover

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

Forced SSO Session Fixation

Account takeover on 8 years old public program

Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat