writeups.xyz / Turning a 50$ Tab-Nabbing vulnerability into a 1000$ Account takeover

Submitter : c2a

Date: 6 June 2023

Bounty : 1,000

Vulnerabilities :

• Reverse Tabnabbing
• Stored XSS
• Self-XSS
• Account Takeover

Programs :

• Undisclosed

Authors :

• Malek Mohamed (@MalekMohamed0)

Link :
https://medium.com/@malekmahmed55/turning-a-50-tab-nabbing-vulnerability-into-a-1000-account-takeover-9c3f32cb2d84