Topic · 1 article
account takeover
Full ATO: chains of email normalization + OTP brute force, OAuth pre-takeover.
Quick answer
What is account takeover?
Full ATO: chains of email normalization + OTP brute force, OAuth pre-takeover.
Articles
1
Beginner
0
Intermediate
1
Advanced
0
Intermediate level
1Practice account takeover with real labs
Apply the techniques in safe environments based on real bug bounty reports.
2,482
hunters training
62
labs from real hacks
1,630
completions
$14,790
paid out for these bugs
11 flags captured this week·Real hacks from HackerOne · YesWeHack · Bugcrowd·No commitment·Free Academy
Free · no account
The checklist I run on every new target
47 checks ordered by cost: first what can get you in trouble, then the cheap stuff, and finally the expensive stuff — which is where the big bounties are. I'll send it to your inbox right now.
Unsubscribe in one click, from any email.
BBLabs · bug bounty training
Stop reading about bugs and start hunting them
Create your free account and practice on labs based on real hacks that paid out thousands of euros. The Academy is free forever.
No card · free Academy · cancel anytime