Reverse Engineering an Account Takeover or what I discovered while updating my email address – part 2

In the previous blog post, I wrote about my observations, which could lead to an account takeover There was no check on changing the personal information like the email address. Observations Another day, another email address update. Another Login screen. I entered my user name and password. I found my way to my account settings Continue reading Reverse Engineering an Account Takeover or what I…