writeups.xyz / Account Takeover Using Cross-Site WebSocket Hijacking (CSWH)

Submitter : c2a

Date: 9 March 2019

Bounty : undisclosed

Vulnerabilities :

• Cross-Site WebSocket Hijacking (CSWH)
• Account Takeover

Programs :

• Undisclosed

Authors :

• Sharan Panegav (@PanegavSharan)

Link :
https://medium.com/@sharan.panegav/account-takeover-using-cross-site-websocket-hijacking-cswh-99cf9cea6c50