Back to directory
WRITEUP #4162

Broken Access Control on samsung.com subdomain leads to Mass Account Takeover of Samsung employees application accounts

ReconInformation disclosureAccount takeoverBroken authorization
by@naglinagli(Gal Nagli)
Program
Samsung
Published
Dec 18, 2020
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://web.archive.org/web/20221001135501/https://galnagli.com/Samsung_Exposure/
▸ RELATED WRITEUPS
How 1 Exposed Honeywell API Gave us Control Over an Internal Engineering System
ReconMissing authentication
P3 (Medium) : How I Gain Access To NASA's Internal Workspace?!
ReconInformation disclosure
How I Got Bugs From Google Dorks
ReconInformation disclosure
How I can easily get four P1 at NASA using Simple Google Dorking.
ReconInformation disclosure
$1600 Bounty on a Main Domain
ReconSession fixation

Built with ❤️ by Shubham Rawat