Back to directory

WRITEUP #4569

How I was able to take over any account via the Password Reset Functionality.

Auth BypassPassword resetAccount takeover

by@Fatnass1F1ras(Firas Fatnassi)

Program

-

Published

Jun 28, 2020

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://medium.com/@fatnassifiras45/how-i-was-able-to-take-over-any-account-via-the-password-reset-functionality-ef1659f8b481

▸ RELATED WRITEUPS

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

Forced SSO Session Fixation

Account takeover on 8 years old public program

Auth BypassAccount takeover

Breaking the Barrier: Admin Panel Takeover Worth $3500

Auth BypassAuthentication bypass

Built with ❤️ by Shubham Rawat