Back to directory

WRITEUP #2535

PoC video

OAuthAccount takeoverOAuth Dirty Dancing

by@fransrosen(Frans Rosén)

Program

-

Published

Jul 7, 2022

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://twitter.com/fransrosen/status/1554498536909201408

▸ RELATED WRITEUPS

Stealing First Party Access Token of Facebook Users: Meta Bug Bounty

OAuthAccount takeover

Self XSS + Login CSRF + OAuth = Account Takeover

Auth BypassAccount takeover

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Self-XSS to ATO via Site Features

How I Got $250 For My Second Bug on HackerOne

OAuthSession expiration issue

Built with ❤️ by Shubham Rawat