Back to directory

WRITEUP #3302

Account Takeover via improper input validation

OAuthToken leakAccount takeover

by@gauravnarwani97(Gaurav Narwani)

Program

-

Published

Oct 24, 2021

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://gauravnarwani.com/account-takeover-via-improper-input-validation/

▸ RELATED WRITEUPS

Stealing First Party Access Token of Facebook Users: Meta Bug Bounty

OAuthAccount takeover

Self XSS + Login CSRF + OAuth = Account Takeover

Auth BypassAccount takeover

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Self-XSS to ATO via Site Features

How I Got $250 For My Second Bug on HackerOne

OAuthSession expiration issue

Built with ❤️ by Shubham Rawat