Back to directory

WRITEUP #3184

Account Takeover via Stored XSS

Auth BypassAccount takeoverStored XSS

by@R29k_(Demon)

Bounty

1,000

Program

-

Published

Dec 9, 2021

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://www.r29k.com/articles/bb/priv-esc-via-stored-xss

▸ RELATED WRITEUPS

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

Forced SSO Session Fixation

Account takeover on 8 years old public program

Auth BypassAccount takeover

$500 for Cracking Invitation Code For Unauthorized Access & Account Takeover

Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat