writeups.xyz / How I was able to take over accounts in websites deal with Github as an SSO provider

Submitter : c2a

Date: 25 January 2022

Bounty : undisclosed

Vulnerabilities :

• Bruteforce
• Lack of Rate Limiting
• SSO
• Email Verification Bypass
• Account Takeover

Programs :

• Undisclosed

Authors :

• Khaled Mohamed

Link :
https://infosecwriteups.com/how-i-was-able-to-takeover-accounts-in-websites-deal-with-github-as-a-sso-provider-294290358e0c