Back to directory
WRITEUP #3942

How I Might Have Hacked Any Microsoft Account

Auth BypassAccount takeoverPassword resetBruteforce2FA / MFA bypass
by@laxmanmuthiyah(Laxman Muthiyah)
Bounty
50,000
Program
Microsoft
Published
Mar 2, 2021
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://thezerohack.com/how-i-might-have-hacked-any-microsoft-account
▸ RELATED WRITEUPS
Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center
Auth Bypass2FA / MFA bypass
Unlocking the Weak Spot: Exploiting Insecure Password Reset Tokens
RCEBruteforce
Interesting Story of an Account Takeover Vulnerability
Auth BypassAccount takeover
Forced SSO Session Fixation
Auth BypassSSO
Account takeover on 8 years old public program
Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat