writeups.xyz / Authentication bypass on Airbnb via OAuth tokens theft

Submitter : c2a

Date: 22 June 2017

Bounty : 5,000

Vulnerabilities :

• OAuth
• Login CSRF
• Open Redirect
• Authentication Bypass

Programs :

• Airbnb

Authors :

• Arne Swinnen (@ArneSwinnen)

Link :
https://www.arneswinnen.net/2017/06/authentication-bypass-on-airbnb-via-oauth-tokens-theft/