writeups.xyz / Account Takeover by OTP bypass

Submitter : c2a

Date: 19 June 2022

Bounty : undisclosed

Vulnerabilities :

• Information Disclosure
• Client-Side Enforcement of Server-Side Security
• OTP Bypass
• Account Takeover

Programs :

• Undisclosed

Authors :

• Vaibhav Kumar Srivastava

Link :
https://codewithvamp.medium.com/account-takeover-by-otp-bypass-ec0cff67f516