{"id":486,"date":"2013-11-27T18:05:37","date_gmt":"2013-11-27T18:05:37","guid":{"rendered":"http:\/\/securityresearch.cysecurity.org\/?p=486"},"modified":"2013-11-27T18:05:37","modified_gmt":"2013-11-27T18:05:37","slug":"recover-gmail-password-vulnerability","status":"publish","type":"post","link":"https:\/\/securityresearch.cysecurity.org\/?p=486","title":{"rendered":"Recover Gmail password Vulnerability"},"content":{"rendered":"<p>Oren hafif, a Security researcher discovered a major workflow related bug in gmail account recovery allowing the users to hijack any given GMAIL account. He points out that, GMAIL stands for\u00a0Global Main Authentication and Identification Library.<\/p>\n<p>This is a type of the password reset vulnerability, in the hacking process attacker have to send an email which looks like an email from an official google account.\u00a0It\u2019s a simple spear-phishing attack by leveraging a number of flaws i.e Cross-site request forgery (CSRF), and cross-site scripting (XSS), and a flow bypass.<\/p>\n<p>Upon clicking the link, it redirect users to a page that is linked to https.google.com but in real it leads the victim to the attacker\u2019s website because of CSRF attack with a customized email address.<\/p>\n<p>After completing the information collecting process\u2014attacker has received your new password that you set for your account and cookie information of your account.<\/p>\n<p>You can check out the demonstration video uploaded to\u00a0YouTube\u00a0by Oren Hafif<\/p>\n<p><iframe loading=\"lazy\" title=\"Google Account Password Recovery Hacked (XSS + CSRF + Flow Bypass)\" width=\"665\" height=\"374\" src=\"https:\/\/www.youtube.com\/embed\/zJFuSPywWM8?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Oren hafif, a Security researcher discovered a major workflow related bug in gmail account recovery allowing the users to hijack any given GMAIL account. He points out that, GMAIL stands for\u00a0Global Main Authentication and Identification Library. This is a type of the password reset vulnerability, in the hacking process attacker have to send an email\u2026 <span class=\"read-more\"><a href=\"https:\/\/securityresearch.cysecurity.org\/?p=486\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-486","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=\/wp\/v2\/posts\/486","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=486"}],"version-history":[{"count":1,"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=\/wp\/v2\/posts\/486\/revisions"}],"predecessor-version":[{"id":487,"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=\/wp\/v2\/posts\/486\/revisions\/487"}],"wp:attachment":[{"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=486"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=486"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}