Back to directory
WRITEUP #5176

Instagram account is reactivated without entering 2FA ($500)

Auth Bypass2FA / MFA bypassBroken authentication
by@amansmughal(Aman Shahid)
Bounty
500
Program
Meta / Facebook
Published
Aug 21, 2019
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://bugbountypoc.com/instagram-account-is-reactivated-without-entering-2fa/
▸ RELATED WRITEUPS
Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center
Auth Bypass2FA / MFA bypass
Account Takeover via Broken Authentication Workflow: Free Lifetime Streaming!
Auth BypassBroken authentication
Plug Security Holes in React Apps That Can Lead to API Exploitation
Auth BypassSSO
Interesting Story of an Account Takeover Vulnerability
Auth BypassAccount takeover
When Certificates Fail: A Story of Bypassed MFA in Remote Access
Other2FA / MFA bypass

Built with ❤️ by Shubham Rawat