Back to directory

WRITEUP #2856

How Token Misconfiguration can lead to takeover account

Auth BypassAccount takeoverLogic flaw

by@justluthra(Cryptographer)

Program

-

Published

Mar 24, 2022

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://cryptograph3r.blogspot.com/2022/03/how-token-misconfiguration-can-lead-to.html

▸ RELATED WRITEUPS

Interesting Business Logic Error leads to Pre-Account Takeover via Verification bypass on GoogleVRP

Auth BypassAccount takeover

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

Forced SSO Session Fixation

Account takeover on 8 years old public program

Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat