WRITEUP #4859

Mail.Ru Ext.B Scope Account Takeover [ $1500 ]

Auth BypassAccount takeoverOAuth

by@myominthu1337(Myo Min Thu)

Bounty

1,500

Program

Mail.ru

Published

Feb 25, 2020

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://web.archive.org/web/20200511064630/https://medium.com/@godofdarkness.msf/mail-ru-ext-b-scope-account-takeover-1500-abdb1560e5f9

▸ RELATED WRITEUPS

Self XSS + Login CSRF + OAuth = Account Takeover

Auth BypassAccount takeover

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

Forced SSO Session Fixation

Auth BypassSSO

Account takeover on 8 years old public program

Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat