Back to directory
WRITEUP #1921

From Static domain to Account Takeover

Auth BypassAccount takeoverLogic flaw
by@R29k_(Demon)
Program
-
Published
Nov 18, 2022
Added to HackDex
Nov 21, 2022
Read Full Writeuphttps://r29k.com/articles/bb/account-takeover
▸ RELATED WRITEUPS
Interesting Business Logic Error leads to Pre-Account Takeover via Verification bypass on GoogleVRP
Auth BypassAccount takeover
Interesting Story of an Account Takeover Vulnerability
Auth BypassAccount takeover
Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center
Auth Bypass2FA / MFA bypass
Forced SSO Session Fixation
Auth BypassSSO
Account takeover on 8 years old public program
Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat