PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Access Control vs Account Takeover: What Bug Bounty Hunters Need to Know

bugcrowd.com | blog | #bug-bounty | #access-control | #account-takeover | #web-security | #xss | #idor | #password-reset
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bug hunter Aituglo distinguishes account takeover from access control bugs, walking through weak password reset flows, IDOR, and XSS-based session theft to help hunters report with the right impact.
Published
Collected

Related coverage

blog · bugbunny.ai
Insecure Direct Object Reference: The Authorization Bug Hiding in Plain Sight
Insecure direct object reference: the app exposes an object ID but never checks ownership, tenant or role—one user reads another's data; fix with centralized object authorization and negative tests.
blog · blog.sentry.security
Cracking Password Reset Mechanisms
Password reset tokens derived from predictable data like an MD5-hashed timestamp let attackers hijack any account including admins; use random tokens, ownership checks and rate limiting.
blog · labs.cognisys.group
Securing the Insecure Objects
Overview
blog · samcurry.net
Permanent account takeover on Yahoo's Small Business platform
The password-reset flow on Yahoo's small business platform carried a client-controlled 'uuid'; a signature/user-ID mismatch let attackers permanently take over other users' accounts.
vulnerability · yeswehack.com
How to find IDOR, stored XSS, information disclosure vulnerabilities – from our #1 hunters for these CWEs
Learn how to find IDOR, stored XSS and information disclosure vulnerabilities with practical tips and techniques from YesWeHack’s top-ranked bug hunters.
research · yokai.hakaisecurity.io
Client-Side Path Traversal na Prática: De Stored XSS à Exclusão de Conta
# Client-Side Path Traversal na Prática: De Stored XSS à Exclusão de Conta RESEARCHER **Pedro Cruz "gankd"** READ TIME**12 MINUTES** PUBLISHED**15 Oct 2026** INDEX ▸ Sumário ▸ Introdução ▸...
Back