writeups.xyz writeups.xyz / 2FA / MFA Bypass

Title Vulnerabilities Programs Authors
When Certificates Fail: A Story of Bypassed MFA in Remote Access
Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center
$1600 Bounty on a Main Domain
2FA Bypass - IDN Mischief
How I Got $150 on HackerOne for My First Bug
500$: MFA bypass By Race Condition
$9240 Bounty in 30 days Hunt Challenge
Tricky 2FA Bypass Leads to 4 digit Bounty $$$$
Bypass Two-Factor Authentication of Facebook Accounts ($25,300)
2FA Bypass Using Custom Cookie Parameter
Netflix — Bypassing Multi-Factor Authentication (MFA)
No Portals Needed
Bypassing the 2FA /MFA — An Easy win
Mass Account takeover by bypassing 2 FA
Two Factor Authentication Bypass On Facebook
0 click Facebook Account Takeover and Two-Factor Authentication Bypass
Access Any Owner Account without Authentication (Auth bypass + 2FA bypass)
2FA Bypass due to information disclosure & Improper access control.
My First And Second Bugs Are — 2FA Bypass
mfa bypass in private program, the abdulsec way
2FA Bypass Do Re Mi
2FA Bypass via Google Identity & OAuth Login
Account Takeover via Response Manipulation
2FA Bypass via Basic Authentication on private bug bounty program
Abusing Facebook’s feature for a permanent account confusion(logic vulnerability)