writeups.xyz / Mixed Messages: Busting Box’s MFA Methods

Submitter : c2a

Date: 18 January 2022

Bounty : undisclosed

Vulnerabilities :

• OTP Bypass
• 2FA / MFA Bypass

Programs :

• Box

Authors :

• Tal Peleg

Link :
https://www.varonis.com/blog/box-mfa-bypass-sms