| Cross-Tenant Information Disclosure: Unraveling Microsoft Connections, Custom Connectors, and OAuth 2.0 in Power Automate |
|
|
|
| A tale of 0-Click Account Takeover and 2FA Bypass. |
|
|
|
| How I was able to take over any account via the Password Reset Functionality. |
|
|
|
writeups.xyz
/
Firas Fatnassi (@Fatnass1F1ras)