Chess.com | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Rook to XSS: How I hacked chess.com with a rookie exploit	XSS OSRF	Chess.com	Jacob
Hacking Chess.com: My Journey to Unlock Premium Bots on the Android App	Android Privilege Escalation	Chess.com	Fr4 (@_Icebre4ker_)
CHECKMATE	Websockets Logic Flaw	Chess.com	Oded Vaanunu Roman Zaikin (@R0m4nZ41k1n) Dan Lasker
10 golden minutes for taking over a Chess.com account	Lack of Rate Limiting Bruteforce Session Expiration Issue	Chess.com	Seqrity (@Seqrity9)
Whose app are you downloading? Link hijacking Binance’s shortlinks through AppsFlyer	Broken Link Hijacking	Chess.com	Sam Curry (@Samwcyo)
Hacking Chess.com and Accessing 50 Million Customer Records	Reflected XSS Information Disclosure Account Takeover	Chess.com	Sam Curry (@Samwcyo)
Finding bugs on Chess.com	Lack of Rate Limiting Bruteforce CSRF	Chess.com	Seqrity (@Seqrity9)

Page 1 of 1