writeups.xyz / From CRLF to Account Takeover

Submitter : c2a

Date: 3 June 2020

Bounty : undisclosed

Vulnerabilities :

• CRLF Injection
• HTTP Response Splitting
• Reflected XSS
• Account Takeover

Programs :

• Undisclosed

Authors :

• Valeriy Shevchenko (@Krevetk0Valeriy)

Link :
https://medium.com/@valeriyshevchenko/from-crlf-to-account-takeover-a94d7aa0d74e