Write-ups

Check The Published Writeups

WDBTitleTagsProgramsAuthorsTypePublicationAdded
2489Bypassing 2FA using OpenID Misconfiguration MFA bypass Authentication flaw NA Youstin (@iustinBB) Bug Bounty2021-06-112023-06-13
2461How I Found A Vulnerability To Hack iCloud Accounts and How Apple Reacted To It Account takeover MFA bypass Rate limiting bypass Race condition Apple Laxman Muthiyah (@laxmanmuthiyah) Bug Bounty2021-06-192023-06-13
2272Bypassing 2-Factor Authentication for Facebook Business Manager (Bounty: 1000 USD) MFA bypass Meta / Facebook Shubham Bhamare (@theshubh77) Bug Bounty2021-08-312023-06-13
2029Bypassing Box’s Time-based One-Time Password MFA OTP bypass MFA bypass Box Tal Peleg Bug Bounty2021-12-022023-06-13
1983How I earned $$$ by bypassing 2FA MFA bypass Forced browsing NA Mohamed Taha (@Mohamed12742780) Bug Bounty2021-12-212023-06-13
19332FA bypass by reading the documentation MFA bypass NA tomorrowisnew (@tomorrowisnew_) Bug Bounty2022-01-092023-06-13
1910Mixed Messages: Busting Box’s MFA Methods OTP bypass MFA bypass Box Tal Peleg Bug Bounty2022-01-182023-06-13
18762fa Bypass by changing Request method MFA bypass NA Arth Bajpai (@arth_bajpai) Bug Bounty2022-01-302023-06-13
1825A tale of 0-Click Account Takeover and 2FA Bypass. Account takeover Password reset MFA bypass NA Firas Fatnassi (@Fatnass1F1ras) Bug Bounty2022-02-122023-06-13
1792How I could’ve bypassed the 2FA security of Instagram once again? MFA bypass Logic flaw Meta / Facebook Samip Aryal (@samiparyal_) Bug Bounty2022-02-212023-06-13
1630Threat Evasion for aws:multifactorAuthPresent condition using Cloudshell MFA bypass AWS Falcnix (@falcnix) Bug Bounty2022-04-132023-06-13
1602How I Bypassed 2FA while Resetting Password MFA bypass Password reset NA Sufiyan Gouri (@gouri_sufyan) Bug Bounty2022-04-232023-06-13
15922FA Secret value disclosure leads to 2FA Bypass - Bug Bounty Writeup MFA bypass Information disclosure NA Aditya Singh / rook1337 (@imrook1337) Bug Bounty2022-04-282023-06-13
15312FA Bypass on private bug bounty program due to CSRF token misconfiguration MFA bypass NA Sharat Kaikolamthuruthil (@sharp488) Bug Bounty2022-05-222023-06-13
15302FA Bypass on private bug bounty program due to improper caching mechanism MFA bypass NA Sharat Kaikolamthuruthil (@sharp488) Bug Bounty2022-05-222023-06-13
1507Abusing Facebook’s feature for a permanent account confusion(logic vulnerability) MFA bypass DoS Logic flaw Meta / Facebook Liv Bug Bounty2022-05-312023-06-13
14662FA Bypass via Basic Authentication on private bug bounty program MFA bypass NA Sharat Kaikolamthuruthil (@sharp488) Bug Bounty2022-06-142023-06-13
1390Account Takeover via Response Manipulation Authentication bypass Account takeover MFA bypass HTTP response manipulation NA BUG HUNTER Bug Bounty2022-07-082023-06-13
12712FA Bypass via Google Identity & OAuth Login MFA bypass Account takeover NA Sharat Kaikolamthuruthil (@sharp488) Bug Bounty2022-08-072023-06-13
12142FA Bypass Do Re Mi MFA bypass NA Ashlyn Lau (@ashlyn_lau) Bug Bounty2022-08-162023-06-13
1153mfa bypass in private program, the abdulsec way MFA bypass NA abdulsec (@moodiAbdoul) Bug Bounty2022-08-302023-06-13
1004My First And Second Bugs Are — 2FA Bypass MFA bypass HTTP response manipulation Information disclosure NA Jai Niresh J Bug Bounty2022-10-032023-06-13
8852FA Bypass due to information disclosure & Improper access control. DoS MFA bypass NA Akash Hamal (@AkashHamal0x01) Bug Bounty2022-10-312023-06-13
768Access Any Owner Account without Authentication (Auth bypass + 2FA bypass) Authentication bypass MFA bypass Account takeover NA Sharat Kaikolamthuruthil (@sharp488) Bug Bounty2022-11-272023-06-13
6640 click Facebook Account Takeover and Two-Factor Authentication Bypass Authentication bypass GraphQL Account takeover Android MFA bypass Meta / Facebook abdellah yaala (@yaalaab) Bug Bounty2022-12-212023-06-13