writeups.xyz / 5 Ways to do Account Takeover in a Single Website

Submitter : c2a

Date: 27 September 2020

Bounty : undisclosed

Vulnerabilities :

• Account Takeover
• Lack of Rate Limiting
• OTP Bypass
• IDOR
• OAuth
• JWT

Programs :

• Undisclosed

Authors :

• Letmeslidein (@VasuYadaav)

Link :
https://medium.com/@vasuyadav0786/5-ways-to-do-ato-in-a-single-website-cfe7e5da987e