Author: Shehzad Ali
-
Account Takeover in Android App (OTP Bypass)
Account Takeover in Android App (OTP Bypass) Share this article: Facebook Github Linkedin Pinterest X-twitter Whatsapp Envelope Hi everyone!We are back with another interesting write-up. This time, We will share how we found an easy Account Takeover (ATO) vulnerability in an Android application during a penetration test. The app we tested was for healthcare, mainly…