[POC] Google OAuth "MultiLogin" endpoint 0-day
by Farfallaiero - Friday December 29, 2023 at 05:40 PM
#1
Informational POC


Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
Rhadamanthys, Risepro, Meduza and Stealc Stealer adopted this technique. On December 26, White Snake also implemented the exploit.

Hidden Content
You must register or login to view this content.

0D|nS3c
Reply
#2
Amazing discovery, thanks for sharing this!
Reply
#3
(12-29-2023, 05:40 PM)Farfalla Wrote: Informational POC


Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
Rhadamanthys, Risepro, Meduza and Stealc Stealer adopted this technique. On December 26, White Snake also implemented the exploit.

really nice..
Reply
#4
(12-29-2023, 05:40 PM)Farfalla Wrote: Informational POC


Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
Rhadamanthys, Risepro, Meduza and Stealc Stealer adopted this technique. On December 26, White Snake also implemented the exploit.

Why do we need to pay credits if it's available for free ?
Reply
#5
Im gonna test this rn. I have read about this and needed to see how it works.
Reply
#6
lests test and see this
Reply
#7
thanks for the share my guy Big Grin
Reply
#8
Holy shit thanks man
Reply
#9
Thank's for the exploit
Reply
#10
Thanks for sharing
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Google Dorks for finding SQL injection vulnerabilities and other security issues 1yush 42 1,732 08-06-2025, 10:45 AM
Last Post: k4mui
  Google Recaptcha Solver Banuk 6 650 07-01-2024, 09:10 PM
Last Post: gee

Forum Jump:


 Users browsing this thread: 1 Guest(s)