writeups.xyz / Insecure Authentication Tokens leading to Account Takeover

Submitter : c2a

Date: 18 September 2023

Bounty : undisclosed

Vulnerabilities :

• Account Takeover
• Android
• Hardcoded Credentials
• Weak Crypto
• Authentication Bypass
• Client-Side Enforcement of Server-Side Security

Programs :

• Undisclosed

Authors :

• Thomas Delfino

Link :
https://www.vaadata.com/blog/insecure-authentication-tokens-leading-to-account-takeover/