Back to directory

WRITEUP #977

Account Takeover via Custom OTP, No User Interaction Required!

Auth BypassAccount takeoverOTP bypassAuthentication bypassRate limiting bypassCaptcha bypass

by@bhavukjain1(Bhavuk Jain)

Program

-

Published

Jul 8, 2023

Added to HackDex

Jul 11, 2023

Read Full Writeuphttps://bhavukjain.com/blog/2023/07/08/account-takeover-custom-otp/

▸ RELATED WRITEUPS

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

Forced SSO Session Fixation

Account takeover on 8 years old public program

Auth BypassAccount takeover

Breaking the Barrier: Admin Panel Takeover Worth $3500

Auth BypassAuthentication bypass

Built with ❤️ by Shubham Rawat