[POC] Google OAuth "MultiLogin" endpoint 0-day
by Farfallaiero - Friday December 29, 2023 at 05:40 PM
#91
interesting thread..let me check ..thanx for sharing mate!!
Reply
#92
Amazing discovery, thanks for sharing this!
Reply
#93
(Dec 29, 2023, 05:40 PM)Farfallaiero Wrote: Informational POC


Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
Rhadamanthys, Risepro, Meduza and Stealc Stealer adopted this technique. On December 26, White Snake also implemented the exploit.

Thabkyou for this
Reply
#94
lets see this...
Reply
#95
very interresting. Thanks
Reply
#96
thanks for the share my guy
Reply
#97
Cool post sigma!
Reply
#98
this is what i was looking for. hope this still works
Reply
#99
okay okay is this even working still?
Reply
Free 0d sounds like something unrealistic
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  {SECRET} DATABASE OF EXPLOITS lulagain 440 27,288 6 hours ago
Last Post: caribou
  Dokan Pro Unauthenticated SQL Injection POC | CVSS 10 Loki 44 3,917 11 hours ago
Last Post: Insulina
  Ban Any Discord Exploit phineasfisherman 7 510 May 06, 2026, 10:16 AM
Last Post: sniperx86
  New Zer0 Day Wordpress A3g00n 81 3,457 May 05, 2026, 03:06 AM
Last Post: DirtyEra
  Wordpress Elementor 3.11.6 Exploit - Full Takeover TheGoodlife 102 19,807 May 04, 2026, 06:45 AM
Last Post: eztocard

Forum Jump:


 Users browsing this forum: 2 Guest(s)