Back to directory

WRITEUP #4335

5 Ways to do Account Takeover in a Single Website

Auth BypassAccount takeoverLack of rate limitingOTP bypassIDOROAuthJWT

by@VasuYadaav(letmeslidein)

Program

-

Published

Sep 27, 2020

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://medium.com/@vasuyadav0786/5-ways-to-do-ato-in-a-single-website-cfe7e5da987e

▸ RELATED WRITEUPS

Self XSS + Login CSRF + OAuth = Account Takeover

Auth BypassAccount takeover

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

Forced SSO Session Fixation

Account takeover on 8 years old public program

Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat