writeups.xyz / How I Gained Access To A Finance Company’s Accounts (Session Hijacking)

Submitter : c2a

Date: 25 July 2022

Bounty : undisclosed

Vulnerabilities :

• Session Fixation
• Weak Crypto

Programs :

• Undisclosed

Authors :

• Talha Karakumru

Link :
https://medium.com/@talhakarakumru/how-i-gained-access-to-a-finance-companys-accounts-session-hijacking-2c6c5d9d84bd