Back to directory

WRITEUP #2589

Account Takeover by OTP bypass

ReconInformation disclosureClient-side enforcement of server-side securityOTP bypassAccount takeover

byVaibhav Kumar Srivastava

Program

-

Published

Jun 19, 2022

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://codewithvamp.medium.com/account-takeover-by-otp-bypass-ec0cff67f516

▸ RELATED WRITEUPS

How 1 Exposed Honeywell API Gave us Control Over an Internal Engineering System

ReconMissing authentication

P3 (Medium) : How I Gain Access To NASA's Internal Workspace?!

ReconInformation disclosure

How I Got Bugs From Google Dorks

ReconInformation disclosure

How I can easily get four P1 at NASA using Simple Google Dorking.

ReconInformation disclosure

$1600 Bounty on a Main Domain

ReconSession fixation

Built with ❤️ by Shubham Rawat