Back to directory
WRITEUP #2953

How I could’ve bypassed the 2FA security of Instagram once again?

Logic Bug2FA / MFA bypassLogic flaw
by@samiparyal_(Samip Aryal)
Bounty
3,150
Program
Meta / Facebook
Published
Feb 21, 2022
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://infosecwriteups.com/how-i-couldve-bypassed-the-2fa-security-of-instagram-once-again-43c05cc9b755
RELATED WRITEUPS
Logic Flaw: I Can Block You from Accessing Your Own Account
Logic BugLogic flaw
“Like” Bypass on Customer Reviews — €500 bounty
Logic BugLogic flaw
When Certificates Fail: A Story of Bypassed MFA in Remote Access
Other2FA / MFA bypass
Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center
Auth Bypass2FA / MFA bypass
$1600 Bounty on a Main Domain
ReconSession fixation

Built with ❤️ by Shubham Rawat