Back to directory
WRITEUP #3557

How I could have hacked your medium account by phishing your FB, Twitter & Google credentials.

OAuthOpen redirect
by@IamRenganathan(Renganathan)
Program
Medium
Published
Jul 29, 2021
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://infosecwriteups.com/how-i-could-have-hacked-your-medium-account-by-phishing-your-fb-twitter-google-credentials-d53bf7096da7
RELATED WRITEUPS
How I Got $250 For My Second Bug on HackerOne
OAuthSession expiration issue
$1600 Bounty on a Main Domain
ReconSession fixation
AI Under Siege: Discovering and Exploiting Vulnerabilities
AI / LLMAI
Stealing First Party Access Token of Facebook Users: Meta Bug Bounty
OAuthAccount takeover
Over 1 Million websites are at risk of sensitive information leakage - XSS is dead. Long live XSS
XSSOAuth

Built with ❤️ by Shubham Rawat