InReflectizbyOran F·Nov 1An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part.
InRadio HackersbySamadhan shimple·Oct 29OTP Login Security Test: I Found a Possible Auth BypassMulti-factor authentication (MFA) is an important security feature used to protect user accounts. Even if someone knows your password, they…
Bluetelly·Oct 21WebVerse Pro — WrongWindow Wheel Write UpChallenge Briefing Cedar Creek Credit Union has 8,400 members and two branches in eastern Kentucky. They mailed out hardware tokens in 2020…
Falgun Sondagar·Oct 1I Found an OTP Bypass Bug in Mahindra’s Account Creation SystemA month of silence from Mahindra, and how CERT-In finally got it fixed ~ By Falgun Sondagar
Sahil maurya·Sep 23I Bypassed OTP Verification by Changing One ResponseHow a simple response manipulation allowed me to continue registration without a valid OTP
THE DAILY STORY·Sep 16The 4-Digit Code That Can Wipe Out Your Bank AccountDiscover how cyber scammers steal your hard-earned money using a simple OTP trick—and the golden rule to stay completely safe.
Rishabh kumar·Jul 26OTP Authentication Bypass in the Mor Bijli AppDuring security testing of the Mor Bijli mobile application, developed by CSPDCL, I identified an OTP authentication bypass.
Mahmoud Magdy·Jul 12FA Bypass via Switching Between Email OTP and TOTP During AuthenticationHello Hackers 👋A response icon2A response icon2
Abhi·May 26🚀 How to Automate SMS OTP Bypasses programmatically in Node.jsAutomating account registration pipelines for automated staging tests, scraper bots, or bulk SMM account management is notoriously tedious…
