$ ls writeups/

02 posts · boxes, labs and bug bounty programs.

/

## 2026

Diagram of the IdP Confusion flow leading to account takeover

Sep 21, 20267 min readIntigriti

Zero-Click Account Takeover: Stealing User Accounts Through Alternative Login (IdP Confusion)

An email verification flaw in the SSO (OpenID Connect) integration between an educational platform and a publisher's identity provider allowed full takeover of any account, with no password, no token and no interaction from the victim.

critical
€700
bug bounty
web
sso
oauth
account takeover

Jun 19, 20262 min readIntigriti

From a Simple Random ID to a Mass PII Leak

A chain of IDORs that resulted in a massive PII leak, from names to GPS coordinates of a major e-commerce platform's customers

high
€1,875
bug bounty
web
idor

Filter by tag

## 2026

Zero-Click Account Takeover: Stealing User Accounts Through Alternative Login (IdP Confusion)

From a Simple Random ID to a Mass PII Leak