Back to directory

WRITEUP #301

How a Single Parameter Led to Two ATO Cases

Auth BypassOIDCAccount takeoverPassword reset

by@cametome006(Fahad Faisal)

Program

-

Published

May 18, 2024

Added to HackDex

Jul 22, 2024

Read Full Writeuphttps://cametom006.medium.com/how-a-single-parameter-led-to-two-ato-cases-c3cf2f4d00c2

▸ RELATED WRITEUPS

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

Forced SSO Session Fixation

Account takeover on 8 years old public program

Auth BypassAccount takeover

Breaking the Barrier: Admin Panel Takeover Worth $3500

Auth BypassAuthentication bypass

Built with ❤️ by Shubham Rawat