Back to directory
WRITEUP #3876

Missing CORS leads to Complete Account Takeover

CSRFMissing CORSAccount takeover
by@nirajmodi51(Niraj Modi)
Program
-
Published
Mar 30, 2021
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://nirajmodi51.medium.com/missing-cors-leads-to-complete-account-takeover-1ed4b53bf9f2
▸ RELATED WRITEUPS
CSRF Bypass Using Domain Confusion Leads To ATO
CSRFAccount takeover
Interesting Story of an Account Takeover Vulnerability
Auth BypassAccount takeover
Self-XSS to ATO via Site Features
XSSSelf-XSS
Basic HTTP Authentication Risk: Uncovering pyspider Vulnerabilities
XSSReflected XSS
Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center
Auth Bypass2FA / MFA bypass

Built with ❤️ by Shubham Rawat