WRITEUP #3678

Story of Account Takeover : Using Social Login with Mass Assignment Vulnerability to hack accounts !

Auth BypassMass assignmentAccount takeover

byMohammad Kaif

Program

Published

Jun 13, 2021

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://kaif0x01.medium.com/story-of-account-takeover-using-social-login-with-mass-assignment-vulnerability-to-hack-accounts-21e4d5856f5e

▸ RELATED WRITEUPS

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

Forced SSO Session Fixation

Auth BypassSSO

Account takeover on 8 years old public program

Auth BypassAccount takeover

$500 for Cracking Invitation Code For Unauthorized Access & Account Takeover

Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat