writeups.xyz / 10 golden minutes for taking over a Chess.com account

Submitter : c2a

Date: 14 September 2021

Bounty : 400

Vulnerabilities :

• Lack of Rate Limiting
• Bruteforce
• Session Expiration Issue

Programs :

• Chess.com

Authors :

• Seqrity (@Seqrity9)

Link :
https://infosecwriteups.com/10-golden-minutes-for-taking-over-a-chess-com-account-56e73f7c5f0d