writeups.xyz / Forgot password? Taking over user accounts Kaminsky style

Submitter : c2a

Date: 21 July 2021

Bounty : undisclosed

Vulnerabilities :

• IP Fragmentation Attack
• Kaminsky Attack
• Password Reset
• Account Takeover
• DNS

Programs :

• Undisclosed

Authors :

• Timo Longin (@Timolongin)

Link :
https://sec-consult.com/blog/detail/forgot-password-taking-over-user-accounts-kaminsky-style/