Back to directory
WRITEUP #3459

Two account takeover bugs worth $4300 🎁

Auth BypassAccount takeoverPrivilege escalation403 bypassIDOR
by@usama_dev(Usama Varikkottil)
Bounty
4,300
Program
-
Published
Aug 29, 2021
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://blog.usamav.dev/two-account-takeover-bugs-worth-4300-dollar-bounty
▸ RELATED WRITEUPS
Interesting Story of an Account Takeover Vulnerability
Auth BypassAccount takeover
Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center
Auth Bypass2FA / MFA bypass
Forced SSO Session Fixation
Auth BypassSSO
Account takeover on 8 years old public program
Auth BypassAccount takeover
The Butterfly Effect: Turning Overlooked - Misconfigurations into Zero Click Account Takeover
APIGraphQL

Built with ❤️ by Shubham Rawat