[POC] Google OAuth "MultiLogin" endpoint 0-day
by Farfallaiero - Friday December 29, 2023 at 05:40 PM
#31
I will try, thank you
Reply
#32
very gooood, tranks men
Reply
#33
Time to hopefully learn some more. Thank you very much brotha Smile
Ban reason: Leeching | http://breachddyfwvcp4kzccos5oxtdbssmfbp...an-Appeals if you feel this is incorrect. (Permanent)
Reply
#34
Thank You Bhai Cool Cool Cool Cool Cool Cool Cool Cool
Reply
#35
let's see is reallly nice
Reply
#36
(12-29-2023, 05:40 PM)Farfallaiero Wrote: Informational POC


Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
Rhadamanthys, Risepro, Meduza and Stealc Stealer adopted this technique. On December 26, White Snake also implemented the exploit.
0days are the new skidware lol
Reply
#37
Holy shit thanks man Holy shit thanks man
Reply
#38
i like the words you speak
Reply
#39
damn, thanks bro
Reply
#40
need to see that thks
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Google Dorks for finding SQL injection vulnerabilities and other security issues 1yush 64 2,429 03-28-2026, 05:09 PM
Last Post: Wayama
  new wordpress website takeover vuln (video + poc ) zinzeur 312 27,277 03-28-2026, 02:43 AM
Last Post: toshi99
  Cool Remote Patching ETW/Amsi PoC pepeloco 6 2,092 02-08-2026, 07:58 AM
Last Post: zeroday99
  CVE-2025-40554 - SolarWinds Web Help Desk Auth Bypass & RCE PoC miyako 3 73 02-07-2026, 03:32 PM
Last Post: cysc
  POC CVE-2025-24071 caca28sapo1 15 805 02-07-2026, 08:53 AM
Last Post: hacker0123



 Users browsing this thread: 1 Guest(s)