writeups.xyz / Bypassing Box’s Time-based One-Time Password MFA

Submitter : c2a

Date: 2 December 2021

Bounty : undisclosed

Vulnerabilities :

• OTP Bypass
• 2FA / MFA Bypass

Programs :

• Box

Authors :

• Tal Peleg

Link :
https://www.varonis.com/blog/box-mfa-bypass-totp/