Search Articles — Sudonull

https://sudonull.com/bypassing-2fa-in-the-bank-brute-force-attack

Pentest breakdown: how a bank's 4-digit SMS code is cracked in 35 sec without limits. API analysis, JS exploit, CWE-307, recommendations. For developers and pentesters.

https://sudonull.com/2fa-saves-85-of-x-accounts-from-botnets

Analysis of a real botnet: how two-factor authentication stopped 85% of attacks on X. Facts, statistics, and recommendations for protecting credentials. Learn why 2FA is mandatory in 2026.

https://sudonull.com/ai-zero-day-google-discovers-machine-created-exploit

Google confirms AI-created zero-day in criminal scheme. Learn how the vulnerability bypassed 2FA and what it means for your security. Read the report.

https://sudonull.com/password-strength-calculations-for-developers

Learn the real password strength from calculations: from 5-digit PIN to passphrase. Recommendations on Argon2 hashing, throttling, and 2FA for middle/senior dev. Check your system.

https://sudonull.com/ebpf-rootkit-in-linux-db-leak-via-contractor

Breakdown of a real eBPF rootkit case: symptoms, detection with bpftool, attack chain via contractor. Protection measures for Linux servers: 2FA, bpf() audit, Falco. Learn how to prevent PII exfiltration.

HackerOne

https://hackerone.com/reports/2479622

**Summary:** The discovered vulnerability allows for the bypass of Two-Factor Authentication (2FA) mechanisms through the …

Two-Factor Authentication | HackerOne Help Center

https://docs.hackerone.com/en/articles/8505330-two-factor-authentication

Jul 10, 2025 · Two-factor authentication (2FA) enables you to add an extra layer of protection from getting your account …

Two-Factor Authentication | HackerOne Help Center

https://docs.hackerone.com/en/articles/8410217-two-factor-authentication

May 27, 2026 · Two-factor authentication (2FA) enables you to add an extra layer of protection from getting your account …

HackerOne

https://hackerone.com/reports/2543342

Specifically, after deactivating an account, users can reset their password and log in without being prompted for 2FA. The 2FA …

HackerOne

https://hackerone.com/reports/1050244

the attacker could bypass the two-factor authentication enforcement [ Steps to reproduce ] 1. Login with an Administrator account. 2. …

HackerOne | Report #2529780 - Improper Authentication - 2FA OTP ...

https://hackerone.com/reports/2529780

**Summary:** I found an “Improper Authentication” issue where the 2FA OTP generated by the Microsoft Authenticator app can be …

HackerOne

https://hackerone.com/reports/2463279

We have access to victim email and password. But we don't have access to 2fa code. So somehow we have to bypass 2fa code …

HackerOne | Report #2598548 - Bypassing HackerOne 2FA due to race ...

https://hackerone.com/reports/2598548

Jul 12, 2024 · A race condition vulnerability was identified in HackerOne's 2FA reset process. The issue allowed an attacker to initiate …

Drugs.com disclosed on HackerOne: Email OTP/2FA Bypass

https://hackerone.com/reports/2315420

The application has a functionality of 2FA by email OTP so i can bypass that 2FA and got the access of application without having …

HackerOne

https://hackerone.com/reports/121696

If a user set 2FA, a user has to enter verification code when a user tries to reset password. Under the "Password Reset" page, a user …