#Account_Takeover - Twitter Hashtag

29 days ago

الحمد لله رب العالمين، حمداً كثيراً طيباً مباركاً فيه First bug. Critical severity. 🙏 ❤️ Independently discovered an OTP Brute-Force bypass leading to #Account_Takeover First one down. What's next is better. 🚀 #BugBounty #HackerOne #WebSecurity #Pentesting

h1acker_'s tweet photo. الحمد لله رب العالمين، حمداً كثيراً طيباً مباركاً فيه

First bug. Critical severity. 🙏 ❤️

Independently discovered an OTP Brute-Force bypass leading to
#Account_Takeover
First one down. What's next is better. 🚀
#BugBounty #HackerOne #WebSecurity #Pentesting https://t.co/4mvPyEw8xV

5

57

1

5

3K

lvl 50 vaporeon @lordgiglbip

6 months ago

@Taithenoodle heh good cock~ #account_takeover

0

2

0

20

khan mamun @mamunwhh

over 3 years ago

vulnerability: account takeover #bugbounty 1. reset pwd via victim and intercept the request 2. now add json body like {"email": [email protected],[email protected]} 3. attacker receive this link and attacker changed victim information (pwd,email etc) #account_takeover #bugbountytips

9

156

41

42

11K

Sina Yeganeh

@Sin4Yeganeh

almost 4 years ago

2- xss is not just for alerting or reading cookies. Show Magic: Report XSS with The greatest effect as you can. listen to me-> in my exprience, most of the time you can do #account_takeover. this trick can help this issue increase the severity of the report So you can earn more

2

11

0

omvapt @omvapt

over 4 years ago

How I managed to trigger #XSS automatically to get critical #account_takeover https://t.co/S1eHwwAlHJ

0

2

0

Le Dev fou @LeDev_Fou

over 4 years ago

#CRLF #account_takeover #bypass #http_pollution great cheatsheet for bugbounty!

Today Cyber News @TodayCyberNews

over 4 years ago

Password Reset Vulnerabilities:- (@wreckworm) 1. Try CRLF injection. 2. Adding you emails. 3. Token Issue. 4. Change Headers. @TodayCyberNews #bugbountytip #bugbunty #cybersecurity #infosec #TodayCyberNews

TodayCyberNews's tweet photo. Password Reset Vulnerabilities:- (@wreckworm)

1. Try CRLF injection.
2. Adding you emails.
3. Token Issue.
4. Change Headers.

@TodayCyberNews

#bugbountytip #bugbunty #cybersecurity #infosec #TodayCyberNews https://t.co/ELDKSTYAtZ

0

164

83

43

0

4

2

0

Today Cyber News @TodayCyberNews

over 4 years ago

Token by the Token you've got from response when you try to reset a victim's account password, and of course the user_id or his email too. @TodayCyberNews #BugBounty #BugBountyTip #Account_Takeover #Reset_Password

2

7

2

0

Today Cyber News @TodayCyberNews

over 4 years ago

5. Sometimes the response will have the #Reset_Token or the #UUID, if they are that same which you get from email (Step 3), then congratulations. You can achieve #Account_Takeover to any account, by using the same form of Reset Link in the email but you have to change the

1

6

1

0

Today Cyber News @TodayCyberNews

over 4 years ago

Today's BugBounty Tip is from @JR0ch17 If you are trying to achieve an #Account_Takeover, you can do that -sometimes- by checking the response of the "Forgot My Password Request". 1. Try to request a password reset link using the website or the app you are using.

TodayCyberNews's tweet photo. Today's BugBounty Tip is from @JR0ch17

If you are trying to achieve an #Account_Takeover, you can do that -sometimes- by checking the response of the "Forgot My Password Request".

1. Try to request a password reset link using the website or the app you are using. https://t.co/j7aLUGgEiM

1

199

62

66

0

Help Net Security @helpnetsecurity

over 6 years ago

What can merchants do to avoid falling victim to large-scale ATO attacks? https://t.co/p6p8UBODLs - @Riskified #cybersecurity #ATO #account_takeover #ecommerce #account #fraud