[POC] Google OAuth "MultiLogin" endpoint 0-day
by Farfallaiero - Friday December 29, 2023 at 05:40 PM
#51
Show us what you are talking about. :-)
Reply
#52
Thanks for sharing broo
Reply
#53
(Dec 29, 2023, 05:40 PM)Farfallaiero Wrote: Informational POC


Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
Rhadamanthys, Risepro, Meduza and Stealc Stealer adopted this technique. On December 26, White Snake also implemented the exploit.

lets see thanks
Reply
#54
Thanks for the sharing, will try to test it now
Reply
#55
lests test and see this
Reply
#56
[font='PingFang SC', 'Segoe UI', Arial, 'Microsoft YaHei', 微软雅黑, 宋体, 'Malgun Gothic', sans-serif]What kind of vulnerability, I wonder[/font]
Reply
#57
Hey i want to watch the thread
Reply
#58
thx bro!!!!goooooood content
Reply
#59
Thank you for sharing

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
#60
OMG this real accounts?
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Dokan Pro Unauthenticated SQL Injection POC | CVSS 10 Loki 41 3,668 8 hours ago
Last Post: Xploitd
  {SECRET} DATABASE OF EXPLOITS lulagain 435 26,401 Yesterday, 06:11 AM
Last Post: DirtyEra
  New Zer0 Day Wordpress A3g00n 81 3,350 Yesterday, 03:06 AM
Last Post: DirtyEra
  Wordpress Elementor 3.11.6 Exploit - Full Takeover TheGoodlife 102 19,710 May 04, 2026, 06:45 AM
Last Post: eztocard
  new wordpress website takeover vuln (video + poc ) zinzeur 314 28,328 Apr 30, 2026, 03:54 PM
Last Post: baku

Forum Jump:


 Users browsing this forum: 1 Guest(s)