14 commits

Author	SHA1	Message	Date
DotDotSlash	418ff228d0	Formatting changes ... Formatting changes to Account takeover due to unicode normalization issue	2023-01-04 21:06:36 +05:30
DotDotSlash	b7df4cb6e8	Updated unicode normalization issue ... Added helpful tools to 'Account takeover due to unicode normalization issue'	2023-01-04 21:03:20 +05:30
Fabian S. Varon Valencia	5cdc02282c	update 10 password reset flaws URL	2022-10-08 23:30:31 -05:00
Nayeem Islam	7e82d93897	Added 2FA bypass via Force Browsing on Account Takeover branch	2022-10-05 17:42:01 +06:00
Swissky	4cf464cc96	Certifried CVE-2022-26923	2022-05-13 09:44:51 +02:00
Swissky	d40e055629	Golden GMSA + Scheduled Task	2022-03-15 11:15:44 +01:00
Swissky	8d31b7240b	Office Attacks	2021-02-21 20:17:57 +01:00
paupaulaz	b7547cc171	Puts the H1 reports at the right place ... The HackerOne reports mentioned in this doc are referring to Request Smuggling, not CSRF	2020-11-22 10:52:20 +01:00
marcan2020	3a5f98e177	Add Password Reset Via Username Collision	2020-10-18 18:13:18 -04:00
Vincent Gilles	0b90094002	Fix(Docs): Correcting typos on the repo	2020-10-17 22:52:35 +02:00
Swissky	b0a9d49aea	Leaking Password Reset Token	2020-10-03 11:30:09 +02:00
Swissky	ef90ce9bce	ATO - Fix typo	2020-09-27 20:05:56 +02:00
Swissky	a478356f43	MySQL Fast Exploitation using json_arrayagg()	2020-09-23 17:19:34 +02:00
Swissky	4d5c10965d	Account Takeover	2020-09-19 11:30:32 +02:00