writeups.xyz / Account Takeover via Custom OTP, No User Interaction Required!

Submitter : c2a

Date: 8 July 2023

Bounty : undisclosed

Vulnerabilities :

• Account Takeover
• OTP Bypass
• Authentication Bypass
• Rate Limiting Bypass
• Captcha Bypass

Programs :

• Undisclosed

Authors :

• Bhavuk Jain (@Bhavukjain1)

Link :
https://bhavukjain.com/blog/2023/07/08/account-takeover-custom-otp/