writeups.xyz writeups.xyz / Sharat Kaikolamthuruthil (@Sharp488)

Title Vulnerabilities Programs Authors
2FA Bypass Using Custom Cookie Parameter
2FA Enabled Accounts Can Bypass Authentication & Access Account After Deactivation
Access Any Owner Account without Authentication (Auth bypass + 2FA bypass)
2FA Bypass via Google Identity & OAuth Login
2FA Bypass via Basic Authentication on private bug bounty program
2FA Bypass on private bug bounty program due to CSRF token misconfiguration
2FA Bypass on private bug bounty program due to improper caching mechanism