writeups.xyz / How I abused 2FA to maintain persistence after a password change (Google, Microsoft, Instagram, Cloudflare, etc)

Submitter : c2a

Date: 25 January 2019

Bounty : undisclosed

Vulnerabilities :

• Logic Flaw
• Broken Authentication

Programs :

• Google
• Microsoft
• Meta / Facebook

Authors :

• Luke Berner

Link :
https://medium.com/@lukeberner/how-i-abused-2fa-to-maintain-persistence-after-a-password-change-google-microsoft-instagram-7e3f455b71a1