Back to directory
WRITEUP #3609

Critical Bug Bounty Reports: Part 1

Auth BypassAccount takeoverPassword resetRCEInformation disclosure
byGreg Gibson
Program
-
Published
Jul 11, 2021
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://infosecwriteups.com/critical-bug-bounty-reports-part-1-6fd9aef4b486
RELATED WRITEUPS
Breaking the Barrier: Admin Panel Takeover Worth $3500
Auth BypassAuthentication bypass
Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources
CloudRCE
Unlocking the Weak Spot: Exploiting Insecure Password Reset Tokens
RCEBruteforce
Interesting Story of an Account Takeover Vulnerability
Auth BypassAccount takeover
Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center
Auth Bypass2FA / MFA bypass

Built with ❤️ by Shubham Rawat