[POC] Google OAuth "MultiLogin" endpoint 0-day
by Farfallaiero - Friday December 29, 2023 at 05:40 PM
#31
I will try, thank you
Reply
#32
very gooood, tranks men
Reply
#33
Time to hopefully learn some more. Thank you very much brotha Smile

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
#34
Thank You Bhai Cool Cool Cool Cool Cool Cool Cool Cool
Reply
#35
let's see is reallly nice
Reply
#36
(Dec 29, 2023, 05:40 PM)Farfallaiero Wrote: Informational POC


Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
Rhadamanthys, Risepro, Meduza and Stealc Stealer adopted this technique. On December 26, White Snake also implemented the exploit.
0days are the new skidware lol
Reply
#37
Holy shit thanks man Holy shit thanks man
Reply
#38
i like the words you speak
Reply
#39
damn, thanks bro
Reply
#40
need to see that thks
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Dokan Pro Unauthenticated SQL Injection POC | CVSS 10 Loki 41 3,683 11 hours ago
Last Post: Xploitd
  {SECRET} DATABASE OF EXPLOITS lulagain 435 26,425 Yesterday, 06:11 AM
Last Post: DirtyEra
  New Zer0 Day Wordpress A3g00n 81 3,356 Yesterday, 03:06 AM
Last Post: DirtyEra
  Wordpress Elementor 3.11.6 Exploit - Full Takeover TheGoodlife 102 19,716 May 04, 2026, 06:45 AM
Last Post: eztocard
  new wordpress website takeover vuln (video + poc ) zinzeur 314 28,335 Apr 30, 2026, 03:54 PM
Last Post: baku

Forum Jump:


 Users browsing this forum: 1 Guest(s)