β€81π₯6π€©3
Found 2 vulnerabilities:
Reward: $1,500
Critical β Authentication Bypass
High β Authentication Bypass
LinkedIn Post
Reward: $1,500
Critical β Authentication Bypass
High β Authentication Bypass
LinkedIn Post
β€59π₯4
Found a valid IDOR vulnerability in Googleπ₯π₯
https://www.facebook.com/share/1C6BgmxdJs/?mibextid=wwXIfr
https://www.facebook.com/share/1C6BgmxdJs/?mibextid=wwXIfr
β€44π₯9π1
β€86π₯14
π₯The 2 New Videos Are Live!
2FA Bypass β Empty OTP Accepted = Account Takeover:
Link
MFA Enforcement Bypass β Invite Team Members Without Enabling MFA
Link
2FA Bypass β Empty OTP Accepted = Account Takeover:
Link
MFA Enforcement Bypass β Invite Team Members Without Enabling MFA
Link
YouTube
Critical TOTP 2FA Bypass β Empty Token Accepted Leads to Account Takeover
In this video, I demonstrate a critical TOTP 2FA bypass vulnerability where the verification endpoint accepts an empty string ("") as a valid 2FA code.
By exploiting this flaw, an attacker who already knows the victim's password can bypass the TOTP verificationβ¦
By exploiting this flaw, an attacker who already knows the victim's password can bypass the TOTP verificationβ¦
β€44π₯5π1