writeups.xyz / Account Takeover via OTP Bruteforce (Apigee API)

Submitter : c2a

Date: 13 June 2020

Bounty : undisclosed

Vulnerabilities :

• OTP Bypass
• Bruteforce
• Lack of Rate Limiting

Programs :

• Undisclosed

Authors :

• Vishnuraj

Link :
https://medium.com/@vishnu0002/account-takeover-via-otp-bruteforce-apigee-api-9b5481c642df