Back to directory

WRITEUP #5188

BookMyShow account takeover using social login

OAuthAccount takeover

by@MadGuyyy(Sukhmeet Singh)

Bounty

28

Program

BookMyShow

Published

Aug 15, 2019

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://medium.com/@madguyyy/bookmyshow-account-takeover-using-social-login-84178f116e42

▸ RELATED WRITEUPS

Stealing First Party Access Token of Facebook Users: Meta Bug Bounty

OAuthAccount takeover

Self XSS + Login CSRF + OAuth = Account Takeover

Auth BypassAccount takeover

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Self-XSS to ATO via Site Features

How I Got $250 For My Second Bug on HackerOne

OAuthSession expiration issue

Built with ❤️ by Shubham Rawat